The Agent Skills Directory

[SAFE]: No malicious patterns, base64 obfuscation, or persistence mechanisms were detected in the skill instructions.
[NO_CODE]: The skill does not include any executable scripts, binary files, or installation commands; it consists entirely of instructional markdown for tool usage.
[PROMPT_INJECTION]: The skill provides a framework for the agent to ingest and act upon data retrieved from the Dometrain API, which constitutes an indirect prompt injection surface. 1. Ingestion points: External data enters the agent context via the search_dometrain, search_code, and get_lesson tools as described in SKILL.md. 2. Boundary markers: The instructions do not define specific delimiters or "ignore instructions" warnings for the retrieved lesson content. 3. Capability inventory: The skill itself does not have file-write or network-access capabilities, though it interacts with the Dometrain MCP tools. 4. Sanitization: There are no instructions for the agent to sanitize or escape the content retrieved from the external API.

dometrain-grounding