The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill reads from a local configuration file (user_prefs.json) to hydrate state and prefix UI options. This creates an indirect injection surface if the file is modified by other processes. Ingestion points: user_prefs.json in the workspace root. Boundary markers: None present; values are directly interpolated into the question prompt. Capability inventory: write_to_file and ask_question tool calls. Sanitization: None detected.
[PERSISTENCE]: The skill uses user_prefs.json to persist user choices across sessions. While intended for user convenience in this demo, it establishes a persistent configuration state in the workspace environment.

making-forms-demo