The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and summarize untrusted data from external resources to create lessons, which could contain malicious instructions for the agent.
Ingestion points: Content from external URLs listed in RESOURCES.md and user-provided learning topics.
Boundary markers: None identified; the skill does not instruct the agent to use specific delimiters or ignore embedded instructions when reading external content.
Capability inventory: The agent has the ability to write files to the local filesystem (HTML lessons, Markdown records) and is instructed to execute CLI commands to open these files.
Sanitization: There are no instructions for the agent to sanitize or validate the content retrieved from external websites before processing it.
[COMMAND_EXECUTION]: The instructions explicitly suggest that the agent use CLI commands (such as open) to display generated lesson files to the user. This creates a shell execution surface governed by the agent's own generated filenames.
[EXTERNAL_DOWNLOADS]: The skill directs the agent to search for and retrieve information from high-quality external resources and communities (e.g., Reddit, academic texts) to populate the teaching workspace, necessitating network operations.

teach