The Agent Skills Directory

[Indirect Prompt Injection Surface]: The skill facilitates the creation of changelog files by ingesting user-provided data such as package names and change summaries. This creates a surface where external content is integrated into the project's repository.
Ingestion points: The Summary, Package, and Version bump parameters defined in SKILL.md serve as entry points for external data.
Boundary markers: While the skill utilizes Markdown templates and YAML frontmatter as structural delimiters, it lacks explicit instructions for the agent to sanitize or ignore instructions potentially embedded within the user-supplied summary text.
Capability inventory: The instructions guide the agent to perform file-write operations within the .changeset directory based on the provided input.
Sanitization: No explicit sanitization or validation protocols are defined for the summary parameter before it is written to the filesystem.

add-changeset