The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes project documentation (CONTEXT.md, ADRs) which represents an attack surface for indirect prompt injection if those files contain malicious instructions.
Ingestion points: Reads CONTEXT.md, CONTEXT-MAP.md, and markdown files in the docs/adr/ directory.
Boundary markers: The instructions do not define specific delimiters or warnings to ignore embedded instructions within the ingested markdown files.
Capability inventory: The skill is designed to read and update domain-related markdown files. It does not utilize network operations, dynamic code execution, or sensitive system file access.
Sanitization: There is no explicit sanitization or validation of the content read from the documentation files before it is processed by the agent.

domain-modeling