The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external files (sprint plans and story files), which could potentially contain malicious instructions designed to influence the agent's behavior.
Ingestion points: The skill reads the full content of markdown files in production/sprints/, the production/sprint-status.yaml file, and any referenced story files to extract status markers and dates.
Boundary markers: There are no explicit instructions to use delimiters or to treat the ingested file content as untrusted data that should not be followed as instructions.
Capability inventory: The skill is limited to Read, Glob, and Grep tools, which restricts the potential impact of any successful injection to information retrieval rather than system modification.
Sanitization: No sanitization, validation, or escaping logic is defined for the content extracted from the project files.

sprint-status