The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill operates by reading and analyzing user-provided source code files to identify performance issues. This creates an attack surface where malicious instructions embedded in the code (e.g., in comments or string literals) could potentially influence the agent's behavior.
Ingestion points: The skill uses Read, Grep, and Glob tools to pull project files into the agent's context for analysis.
Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between code-to-be-analyzed and natural language instructions that might be hidden within that code.
Capability inventory: The skill allows access to the Bash tool, which provides a high-privilege execution environment that could be targeted if an injection is successful.
Sanitization: The instructions do not specify any validation, filtering, or sanitization of the ingested code content before the agent processes it.

codeprobe-performance