The Agent Skills Directory

[PROMPT_INJECTION]: The scripts/manage_terminal_title.py module facilitates indirect prompt/command injection by concatenating potentially untrusted data into terminal control sequences without sanitization.
Ingestion points: The state_dict parameter in the compose() and _compose_body() functions, specifically the current_phase and short_description fields which may contain user-provided text.
Boundary markers: No specific delimiters or escaping mechanisms are applied to the short_description or phase values before they are formatted into the title body.
Capability inventory: The composed string is intended for use in terminal OSC (Operating System Command) sequences (e.g., \x1b]0;{composed}\x07). If a phase or description contains control characters like \x07 (BEL) or \x1b (ESC), it could truncate the title sequence and inject subsequent terminal commands.
Sanitization: The module performs basic whitespace stripping using .strip() but does not filter for terminal control characters or ANSI escape sequences.

manage-terminal-title