The Agent Skills Directory

[NO_CODE]: The skill is strictly documentation-based, consisting only of Markdown files. It contains no code in Python, JavaScript, or other languages, and requests no system-level permissions.
[INDIRECT_PROMPT_INJECTION]: The skill includes an ingestion surface for user input via the $ARGUMENTS placeholder in SKILL.md and several files in the commands/ directory. There are no boundary markers or sanitization routines present. However, because the skill lacks any execution capabilities or access to tools, this surface does not pose a functional security risk.

scamper