The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes user preferences for theme customization to modify configuration files such as ~/.windsurf/settings.json and .vscode/settings.json. This creates a surface for indirect prompt injection where malformed or malicious user input could potentially affect the IDE environment.
Ingestion points: Ingests user preferences through phrases such as "change theme", "customize colors", and "visual preferences" mentioned in SKILL.md.
Boundary markers: No explicit boundary markers or instructions to ignore embedded instructions within user-provided theme values are present in the provided documentation.
Capability inventory: The skill is configured with Read, Write, and Edit tools as defined in the SKILL.md frontmatter, which are used to manage configuration files.
Sanitization: There are no documented procedures for sanitizing, validating, or escaping user input before it is applied to the JSON configuration files.
[SAFE]: All external links and resources point to official documentation (windsurf.ai, w3.org) or the author's personal/professional websites (intentsolutions.io, tonsofskills.com, jeremylongshore.com), which is consistent with the skill's stated purpose and author identity.

windsurf-theme-customization