The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill utilizes the mcp__tidewave__project_eval tool to execute arbitrary Elixir code within the running application's context. While intended for testing and inspection (e.g., Process.whereis, sys.get_state, MyApp.Accounts.create_user), this capability allows for script generation and execution based on agent-generated logic.
[COMMAND_EXECUTION]: The skill includes instructions for using mcp__tidewave__execute_sql_query to perform arbitrary database operations. This includes schema introspection, data verification, and potentially data mutations, bypassing standard application logic layers.
[INDIRECT_PROMPT_INJECTION]: The skill establishes an indirect prompt injection surface by instructing the agent to proactively query runtime state at workflow checkpoints. An attacker who can influence the application's logs, database records, or LiveView state (e.g., through web requests) could potentially inject instructions that the agent would then ingest and act upon during these proactive checks.
Ingestion points: Tools such as mcp__tidewave__get_logs (reading application logs), mcp__tidewave__execute_sql_query (reading database records), and mcp__tidewave__project_eval (inspecting process state) serve as entry points for untrusted data into the agent's context (referenced in SKILL.md and references/proactive-patterns.md).
Boundary markers: The instructions do not define specific delimiters or warnings to ignore instructions embedded in the runtime data.
Capability inventory: The agent has the capability to execute Elixir code (project_eval) and SQL queries (execute_sql_query), which could be leveraged if a prompt injection is successful.
Sanitization: There is no mention of sanitizing or filtering the content retrieved from the running application before it is processed by the agent.
[EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the tidewave dependency from the official Hex package registry ({:tidewave, "~> 0.6", only: :dev}). This is a standard practice using a well-known package registry.

tidewave-integration