The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to resolve and execute shell commands from an external file named AGENTS.md. While the skill includes a mitigation strategy by directing the agent to "ask when a command is undefined," this pattern creates a dependency on an external configuration file for system-level operations.
[DATA_EXFILTRATION]: The core logic of the skill requires the agent to paste comprehensive evidence, including reproduction outputs, test results, and "everything" from command executions. This practice can lead to the accidental exfiltration of sensitive information, such as environment variables, local file paths, or credentials, if they are printed to the console during the execution of tests or debugging tools.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it is designed to ingest and act upon external bug reports and specifications. A maliciously crafted bug report could contain instructions intended to override the agent's behavior or influence the resulting patch.
Ingestion points: Consumes external bug reports and specification files as the primary input for the task.
Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the ingested bug reports.
Capability inventory: Executes shell commands (testing, building, patching) based on the contents of the report and AGENTS.md.
Sanitization: No explicit sanitization or filtering of the bug report content is performed before processing.

write-fix