The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest, process, and cite data from external resources identified during the teaching process. This creates a surface where malicious instructions embedded in external articles, books, or community forums (like Reddit) could influence the agent's behavior during lesson creation or mission updates.
Ingestion points: The skill reads from RESOURCES.md (which contains external URLs) and processes content from these external sources to create lessons.
Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the processing logic.
Capability inventory: The agent has the capability to write files (.html, .md) and execute CLI commands.
Sanitization: No sanitization or validation of external content is specified before it is incorporated into the learning workspace.
[DYNAMIC_EXECUTION]: The agent is instructed to generate interactive HTML lessons and reusable components (such as quiz widgets and simulators) in the ./lessons/ and ./assets/ directories. These files are intended to contain executable content (JavaScript/CSS) and are reused across the workspace.
Evidence: SKILL.md directs the agent to create self-contained HTML files and reusable assets in ./assets/ to build an interactive feedback loop for the user.
[COMMAND_EXECUTION]: The instructions recommend that the agent use a CLI command to open the generated lesson files for the user. While this is a convenience feature, it involves the agent executing shell commands based on its own generated output.
Evidence: SKILL.md states: "If possible, open the lesson file for the user by running a CLI command."

teach