The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill facilitates the analysis of external codebases, which represents a potential ingestion surface for indirect prompt injection. This is inherent to the purpose of static analysis tools.
Ingestion points: Source code from the project codebase (referenced in SKILL.md).
Boundary markers: None specified.
Capability inventory: Generating Semgrep rules, authoring CodeQL queries, and interpreting analysis results.
Sanitization: None specified.
[EXTERNAL_DOWNLOADS]: The implementation section references official GitHub Actions for Semgrep and CodeQL to be used in CI/CD pipelines.
Evidence: Mentions semgrep/semgrep-action and github/codeql-action in SKILL.md.

codeql-semgrep