The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon untrusted user input which creates a potential surface for indirect prompt injection.
Ingestion points: The argument-hint field in SKILL.md indicates the skill accepts a [task description] from the user.
Boundary markers: There are no explicit boundary markers or instructions to ignore embedded commands within the provided SKILL.md text.
Capability inventory: The skill is granted access to high-privilege tools including Bash, Write, and Edit as specified in the allowed-tools frontmatter.
Sanitization: There is no evidence of input sanitization or validation performed on the user-provided task description before it is processed by the execution context.

gsd-fast