The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze untrusted WordPress source code, which creates a potential indirect injection surface where malicious instructions could be embedded in code comments or strings within the files being reviewed.
Ingestion points: Processes WordPress .php source files (implied in SKILL.md search patterns).
Boundary markers: The instructions do not specify boundary markers or instructions to ignore embedded commands within the analyzed code.
Capability inventory: The skill is limited to information analysis and generating a review report; it contains no tools or commands for network operations, file writing, or system modification.
Sanitization: No sanitization of ingested code content is specified.
[COMMAND_EXECUTION]: The skill provides rg (ripgrep) commands for the user to execute. These are standard search patterns for auditing code and do not include any malicious shell injection or unintended command chaining.

wp-migration-upgrade-review