The Agent Skills Directory

[COMMAND_EXECUTION]: The skill documents the use of the specify command-line tool for preset management, including lifecycle commands like add, remove, enable, and disable.- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading content from external sources through commands such as specify preset add --from <url> and specify preset catalog add <url>.- [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface for indirect prompt injection by facilitating the ingestion of remote presets and catalogs.
Ingestion points: External content is pulled into the agent's context via the --from <url> and catalog add <url> arguments in SKILL.md.
Boundary markers: The skill does not define specific prompt boundary markers, but it does include a security warning advising users to only permit installation (--install-allowed) for trusted catalogs.
Capability inventory: The skill leverages shell execution capabilities through the specify CLI.
Sanitization: No explicit sanitization or validation of the remote content is described within the instruction file, relying on the underlying CLI implementation.

speckit-preset