The Agent Skills Directory

Functionality and Capabilities: The skill is designed to provide architectural and code reviews, focusing on the principle of 'You Aren't Gonna Need It' (YAGNI). To perform this role, it includes instructions to utilize standard tools for file system access and web searching. These capabilities are consistent with the stated goal of analyzing local project structures and researching simpler prior art.
Indirect Prompt Injection Surface: As a code review tool, the skill naturally ingests untrusted data in the form of user-provided source code, which constitutes a potential surface for indirect prompt injection.
Ingestion points: The skill instructs the agent to use Read/Grep/Glob tools to examine the project state (SKILL.md, Execution Steps).
Boundary markers: There are no explicit instructions for the agent to use specific delimiters or to ignore instructions embedded within the code it reviews.
Capability inventory: The agent possesses file system read access and network access via web search tools.
Sanitization: The instructions do not specify a sanitization process for the code comments or content it processes.
Context: This attack surface is a standard consideration for all AI-based review tools. The risk is minimized by the agent's strong internal persona and safety protocols designed to distinguish between data-to-be-analyzed and authoritative instructions.

cranky-old-sam