The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to process and act upon frontend project files (React, Vue, CSS, etc.) which may contain untrusted content that could influence the agent's behavior.
Ingestion points: The skill uses Read and Grep tools to pull project source code into the agent context.
Boundary markers: The instructions lack explicit delimiters or warnings to ignore embedded instructions within the project files being processed.
Capability inventory: The skill has significant capabilities including arbitrary shell command execution via Bash(cmd:*) and file modification via Write and Edit tools.
Sanitization: There is no evidence of sanitization or filtering to prevent the agent from obeying instructions embedded in the data it reads.

zustand-store-creator