The Agent Skills Directory

[COMMAND_EXECUTION]: The skill relies on the fest CLI tool to perform file system operations, including creating directories (mkdir), initializing state (.workflow/), and writing workflow files (WORKFLOW.md). These actions are core to the skill's documented purpose of workflow management.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data to generate content for WORKFLOW.md files, which could lead to indirect prompt injection if malicious instructions are embedded in the workflow definitions.
Ingestion points: User-provided JSON strings via the --steps flag, JSON files via the --steps-file flag, and interactive TTY input described in SKILL.md.
Boundary markers: No explicit delimiters or boundary instructions are mentioned for the content injected into the generated WORKFLOW.md file.
Capability inventory: The fest CLI tool performs file system writes and manages local runtime state as described in SKILL.md.
Sanitization: The skill documentation does not describe specific sanitization or validation of the input strings beyond the basic JSON structure requirement.

fest-standalone-workflows