The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes npm run build as a standard step to synchronize project documentation and assets after registering a new skill.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external GitHub repositories and local markdown files, which represents an attack surface for indirect prompt injection.
Ingestion points: The skill reads metadata from local SKILL.md files in the .agents/skills/ directory and from external GitHub URLs provided by the user.
Boundary markers: There are no explicit instructions to use delimiters or to disregard instructions embedded within the metadata of the external files being read.
Capability inventory: The skill possesses the ability to modify project files (src/data/skills.json) and execute shell commands (npm run build).
Sanitization: The skill does not implement validation or sanitization of the content extracted from external sources before it is written to the registry or processed during the build phase.

skill-manager