The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from the local codebase.
Ingestion points: The skill instructs the agent to analyze the target area and search for design system components or UI patterns using tools like grep as specified in SKILL.md.
Boundary markers: None present. There are no instructions to use delimiters or specifically ignore instructions embedded within the code or comments being analyzed.
Capability inventory: The skill possesses both read capabilities (to identify patterns) and write capabilities (to create new components, design tokens, and refactor existing code) as described in the Plan Extraction, Extract & Enrich, and Migrate sections.
Sanitization: None present. The skill does not define validation or sanitization steps for the content extracted from project files before it is used to generate or modify code.

extract