The Agent Skills Directory

[DYNAMIC_EXECUTION]: The file scripts/generate_error_report.py contains logic to generate executable shell scripts. The generate_script function takes user-provided content, writes it to a .sh file, and uses chmod(0o755) to grant execution permissions. This allows the creation and preparation of arbitrary commands for execution at runtime.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze external data sources, specifically application logs and monitoring metrics. This creates a surface for indirect prompt injection where malicious instructions hidden in logs could be processed by the agent.
Ingestion points: The agent is directed to read logs from ${CLAUDE_SKILL_DIR}/logs/ and fetch data from monitoring APIs.
Boundary markers: The instructions do not define delimiters or specific "ignore" rules to prevent the agent from following instructions embedded within the analyzed logs.
Capability inventory: The skill has shell access through allowed tools (Bash, Grep) and the ability to create executable files via the generator script.
Sanitization: No sanitization or validation mechanisms are present to filter content retrieved from the log files before it is processed.

monitoring-error-rates