The Agent Skills Directory

[SAFE]: The skill is designed for local status monitoring. It uses the Bash tool to execute a single, specific command (altitude status) as defined in the allowed-tools configuration. This follows the principle of least privilege by scoping command execution to a specific diagnostic utility.
[INDIRECT_PROMPT_INJECTION]: The skill instructions involve summarizing the output of the altitude status command. While processing external tool output is an ingestion point for potentially untrusted data, the skill's functionality is limited to summarization and providing helpful UI hints. It does not possess capabilities (like file writing or network exfiltration) that would make an injection attack actionable or high-risk.

status