The Agent Skills Directory

[PROMPT_INJECTION]: The skill contains a 'Canonical prompt' which serves as a task-specific instruction template for reorganizing Nix repositories. It does not attempt to override system instructions, bypass safety filters, or extract system prompts.
[DATA_EXFILTRATION]: No network operations, hardcoded credentials, or access to sensitive file paths (like SSH keys or AWS credentials) were detected. The file paths mentioned (e.g., flake.nix, src/) are standard in Nix development.
[REMOTE_CODE_EXECUTION]: The skill does not perform remote downloads or execute code from external sources. It recommends standard Nix CLI tools like nix flake show and nix flake check for verification, which are local development tools.
[OBFUSCATION]: No obfuscation techniques such as Base64, zero-width characters, homoglyphs, or encoded strings were found. All instructions are in plain text.
[DYNAMIC_EXECUTION]: The skill discusses Nix-specific build-time string substitution (e.g., replaceVars, substituteAll) as a best practice for packaging shell scripts. This is standard configuration management logic and does not involve runtime execution of untrusted input.
[INDIRECT_PROMPT_INJECTION]: While the skill instructs the agent to process local repository files, it does not ingest untrusted remote data or possess capabilities that could be exploited via indirect injection. The risk surface is minimal and considered safe.

nix-flake-organization