The Agent Skills Directory

[SAFE]: The skill consists entirely of instructional documentation and development best practices. It does not include any executable scripts, shell commands, or external dependencies.
[INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent ingests untrusted data from the user's environment to perform its task.
Ingestion points: The agent is instructed in SKILL.md to "Inspect the existing repository, framework, dependencies, and conventions."
Boundary markers: None defined within the skill instructions.
Capability inventory: The skill does not define any active capabilities such as file-system writes, network operations, or subprocess execution.
Sanitization: The instructions do not specify sanitization or validation methods for the inspected repository content.
Note: This ingestion surface is intrinsic to the primary purpose of a coding assistance skill and does not pose a heightened risk in this context.

24-lenis