The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external files, creating a potential surface for indirect prompt injection if those files contain malicious instructions.
Ingestion points: The agent is instructed to read Cargo.toml, Cargo.lock, rust-toolchain.toml, and various .rs source files within a project directory (SKILL.md, Steps section).
Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when reading file content.
Capability inventory: The skill's capabilities are limited to file reading. It explicitly states 'Write: none' and contains no network operations, subprocess executions, or dynamic code evaluation.
Sanitization: There is no mention of sanitizing or filtering the content of the files before the agent processes and summarizes them.

load-context