The Agent Skills Directory

[SAFE]: The skill does not contain any evidence of credential harvesting, unauthorized network communication, or malicious code execution. All external links point to official documentation or the author's verified sites.
[INDIRECT_PROMPT_INJECTION]: The skill manages external configuration files which could serve as an attack surface for indirect prompt injection if those files were to contain malicious instructions.
Ingestion points: Files located in the .windsurf-team/settings/ and .windsurf-team/policies/ directories, as specified in references/directory-structure.md.
Boundary markers: None identified in the skill's current documentation or templates.
Capability inventory: The skill is authorized to use Read, Write, and Edit tools as defined in SKILL.md.
Sanitization: The skill utilizes structured JSON for all configurations, providing a layer of data isolation, though specific input validation logic is not detailed in the markdown instructions.

windsurf-team-settings