The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and auditing external file content via the /fixing-accessibility <file> command, which creates a potential surface for indirect prompt injection if the audited files contain malicious instructions.
Ingestion points: File content provided as an argument to the /fixing-accessibility command.
Boundary markers: The skill instructions do not specify the use of delimiters or clear separation between the file content and the agent's instructions.
Capability inventory: While the skill itself is limited to reviewing and reporting, the agent's ability to read files and generate code based on those files is a required capability for the skill's operation.
Sanitization: There are no instructions for the agent to sanitize or ignore potentially malicious instructions embedded within the source files.
[NO_CODE]: The skill consists entirely of markdown instructions and documentation. It does not include any executable scripts, binary files, or automated configuration changes, significantly limiting its direct impact on the host system.

fixing-accessibility