The Agent Skills Directory

[PERSISTENCE]: The /reflect and /wrap-session commands can modify global and user-level configuration files, such as ~/.claude/CLAUDE.md, ~/.claude/rules/, and rules within other skills. This mechanism allows session-specific information to persistently influence the agent's behavior in future sessions and across various projects.
[COMMAND_EXECUTION]: The /release command executes high-impact shell commands including npm run build and npm audit. These actions run scripts defined in a project's package.json file, which could result in arbitrary code execution if the project contains malicious configurations. The command also utilizes the GitHub CLI (gh) for repository authentication and management.
[DYNAMIC_EXECUTION]: The /reflect command enables the creation of new executable components, such as shell scripts, npm scripts, and custom agent definitions (.claude/agents/*.md). This dynamic creation from conversational context introduces a risk of executing unverified code.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from conversation history and local files (SESSION.md, IMPLEMENTATION_PHASES.md) to generate documentation, rules, and session state. The lack of explicit sanitization or boundary markers in these ingestion processes creates a surface for indirect prompt injection.
Ingestion points: Conversation history in /brief and /reflect; local planning files in /continue-session and /wrap-session.
Boundary markers: No explicit delimiters or warnings are used to handle embedded instructions in the ingested data.
Capability inventory: The skill possesses capabilities for file writing, shell command execution, and modification of agent-level rules.
Sanitization: There is no evidence of validation or filtering for data extracted from conversations before it is written to persistent files or configuration settings.
[PRIVILEGE_ESCALATION]: The /release command manages GitHub authentication credentials through the gh CLI and performs privileged operations such as repository creation (gh repo create) and release management (gh release create).

project-workflow