The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where user-supplied inputs, such as project names and module paths, are used as arguments for the gcx CLI tool.
Ingestion points: Interactive and non-interactive inputs for the gcx dev scaffold command described in SKILL.md.
Boundary markers: No explicit delimiters or safety warnings are present to isolate user-provided strings within the command instructions.
Capability inventory: Shell execution of the gcx CLI tool and the go mod tidy dependency management command.
Sanitization: The instructions do not specify input validation or escaping for these parameters, which is common for developer-oriented scaffolding tools.
[COMMAND_EXECUTION]: The skill instructs the agent to run the gcx CLI tool for project scaffolding (gcx dev scaffold) and resource deployment (gcx resources push). This usage is within the scope of the skill's defined purpose and involves the authoring vendor's official tooling.
[EXTERNAL_DOWNLOADS]: The skill recommends running go mod tidy to resolve Go module dependencies for the scaffolded project. This is a standard development practice that fetches packages from the configured Go proxy.

scaffold-project