The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data (project source code and configuration files), which creates an attack surface for indirect prompt injection.
Ingestion points: The skill uses Grep, Glob, and Read tools to scan directories like **/config/, **/auth/, and **/database/ for specific patterns.
Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are utilized when processing the content of audited files.
Capability inventory: The skill utilizes Bash for project discovery and code path tracing, providing a functional environment for executing shell commands.
Sanitization: The skill does not implement sanitization or validation of the audited code content before it is processed by the agent.
[COMMAND_EXECUTION]: The skill uses the Bash tool to perform project discovery and verify runtime behavior. While this is consistent with its role as a security auditor, executing or tracing code paths in potentially malicious projects carries inherent risks if the agent attempts to run untrusted code to verify its behavior.

insecure-defaults