The Agent Skills Directory

Indirect Prompt Injection Surface: The skill is designed to ingest data from external sources, including outcome hypotheses, feasibility studies, and research artifacts. This represents an attack surface for indirect prompt injection if the source data contains malicious instructions. The skill mitigates this by requiring strict validation against predefined YAML schemas and integrity verification using SHA-256 hashes before incorporating data into the documents.
File System Operations: The skill coordinates work across sessions by reading from and writing to the .copilot-tracking/ directory. This is used for managing session state and handoff payloads. While it involves file I/O, these operations are scoped to documented tracking paths and appear to be part of the skill's intended architectural design for state persistence.

requirements-author