The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external code files, which constitutes a surface for indirect prompt injection where malicious instructions embedded in the reviewed code could influence agent behavior.
Ingestion points: The skill utilizes Read, Grep, and Glob tools to access and process source code files from the environment.
Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following instructions found within the code being reviewed.
Capability inventory: The skill is granted access to the Bash tool, providing a powerful capability for system interaction.
Sanitization: The instructions do not specify any sanitization, filtering, or validation steps for the content of the files being read before they are processed by the agent.

dhh-code-reviewer