The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill reads and processes source code from the repository (src/*.ts, src/*.tsx) using grep to extract external URLs for the manifest.json network permissions. This represents an indirect prompt injection surface where the content of the processed files could potentially influence the agent's behavior during the manifest generation process.
Ingestion points: Processes files in the src/ directory during Step 4 and Step 6.
Boundary markers: None present to distinguish between code and potential embedded instructions.
Capability inventory: The skill possesses Edit, Write, and Bash capabilities to modify project files and run audit commands.
Sanitization: The instructions include a mitigation requiring the agent to flag dynamic URLs for manual user verification.
[COMMAND_EXECUTION]: The skill utilizes Bash to execute grep for auditing the codebase and instructs the agent to update package.json scripts to use @cognite/cli. These operations are standard for the intended migration task and target vendor-owned infrastructure.

migrate-app-to-flows