The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and follow instructions from local files CONTEXT.md and CONTEXT-MAP.md. This represents a data ingestion surface where external content could influence agent output.
Ingestion points: Local files CONTEXT.md and CONTEXT-MAP.md referenced in SKILL.md.
Boundary markers: None present.
Capability inventory: The skill explicitly sets disable-model-invocation: true, which prevents the agent from calling tools, executing code, or performing network operations.
Sanitization: No explicit sanitization or filtering of the file content is mentioned.
[SAFE]: No malicious patterns, obfuscation, hardcoded credentials, or unauthorized network access were detected. The skill's primary purpose is text simplification and style matching.

wait-what