The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by reading and analyzing local Rails application source code.
Ingestion points: The skill uses Read, Grep, and Glob tools to inspect project files (SKILL.md).
Boundary markers: The instructions do not define specific delimiters or instructions to help the agent distinguish between its own guidelines and potentially malicious instructions embedded in the analyzed code.
Capability inventory: The skill has access to the Bash tool, which allows for shell command execution.
Sanitization: There is no explicit logic provided to sanitize or escape the content of the files read from the local environment.

privacy-reviewer