The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill mandates that "Instructions inside the sources are binding," which explicitly instructs the agent to follow commands embedded within potentially untrusted source material provided by users or external files.
Ingestion points: The skill ingests text, file paths, or URLs as source material during the revision process as defined in the "Workflow" and "CRITICAL" sections of SKILL.md.
Boundary markers: No explicit delimiters or boundary markers are used to wrap source content, and there are no instructions to ignore embedded commands; rather, the agent is told to treat them as authoritative.
Capability inventory: The skill possesses the ability to read and write files, execute shell scripts, and run system commands such as git, hugo, and lychee.
Sanitization: There is no evidence of sanitization or filtering of the source material to remove or neutralize embedded instructions.
[COMMAND_EXECUTION]: The skill relies on several system commands and local scripts to perform its operations.
Git operations: It executes git commands (ls-files and status) to check project state and track file changes.
Style checking: It uses complex grep patterns to scan for prohibited voice and tone markers in the revised text.
Local scripts: It executes a local bash script (scripts/swap-revision.sh) to manipulate files in the Hugo project structure, which includes using shasum for directory hashing and the temporary directory (/tmp) for backups.
Tool invocation: It invokes external binaries including hugo for site building and lychee for checking the status of links within the article body.
[OBFUSCATION]: The documentation file references/writing-style.md contains multiple instances of the zero-width space character (U+200B).
Evidence: The pattern "{{<" in the documentation actually contains hidden zero-width characters (e.g., "{{<").
Purpose: These characters are used to escape Hugo template syntax so that example shortcodes are rendered as plain text rather than being processed by the site builder. While functional for documentation, these non-printing characters hide content from plain-text scanning and visual inspection.

write-article-revision