The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill reads external project files such as requirements.md and design.md to generate its validation checklists. This ingestion of documentation represents a surface for indirect prompt injection, though it is used for standard development tasks without exposing high-risk capabilities. Ingestion points: Reads requirements.md, design.md, tasks.md, and other product context files from the local repository. Boundary markers: The instructions do not specify using delimiters or warnings when reading these files. Capability inventory: The skill is restricted to local file reads and writes within the workspace and invoking other agents for testing; it lacks direct shell execution or network access. Sanitization: No sanitization or filtering of the document content is described.

validate-feature