The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform specific file system operations during the migration process. Specifically, it executes rm -f CLAUDE.md and ln -sf AGENTS.md CLAUDE.md to handle legacy compatibility symlinks. It also instructs the agent to perform git commit operations to version control the generated documentation. These operations are limited in scope and directly related to the skill's stated purpose.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it reads and processes untrusted data from the project codebase to generate new context files.
Ingestion points: The skill reads README.md, CLAUDE.md, existing AGENTS.md files, and content within the docs/ directory of the project root (SKILL.md Step 1, Step 3).
Boundary markers: The instructions do not specify the use of boundary markers or delimiters when interpolating data from these files into the agent's reasoning process.
Capability inventory: The agent has access to Bash for command execution, Write/Edit for file modification, and Git for staging/committing changes.
Sanitization: There is no mention of sanitization, filtering, or validation of the content read from the project files before it is used to generate new instructions for the agent (Step 5, Step 6).

forge-setup-project