The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of code diffs or pull requests.
Ingestion points: The argument-hint metadata field indicates the skill takes a 'Diff or pull request to review' as its primary input.
Boundary markers: The instructions do not define delimiters or specific markers to help the agent distinguish between its instructions and potentially malicious content embedded within the code diff.
Capability inventory: No additional executable scripts or tools are included in the skill, which limits the potential impact of an injection.
Sanitization: No sanitization or validation logic is defined for the external input.

code-review