The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill recommends using eval "$(fest shell-init zsh)" to set up shell aliases and helpers. This involves executing dynamically generated shell code from the local fest binary.- [INDIRECT_PROMPT_INJECTION]: The skill provides commands to ingest external data for scaffolding, specifically via the --plan flag for files and the --steps flag for JSON input. This creates an attack surface where maliciously crafted plan files or JSON could attempt to influence the agent's behavior.
Ingestion points: SKILL.md instructions for fest scaffold --plan <file> and fest create workflow --steps <json>.
Boundary markers: None identified in the provided instructions.
Capability inventory: File and directory creation (fest create), shell helper initialization, and path linking (fest link).
Sanitization: No explicit sanitization or validation of the input data is described in the skill.

fest-planning