The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill identifies the current work phase by reading recent files and project data, which could allow instructions embedded in those files to influence agent behavior.
Ingestion points: Recent files in the project directory are read to detect phase and gather work state (SKILL.md).
Capability inventory: The skill possesses Read, Write, Bash, and Grep capabilities, enabling it to write handoff files and execute shell commands.
Boundary markers: No explicit delimiters or warnings are defined to isolate project data from the agent's core instructions.
Sanitization: The instructions do not specify any filtering or escaping of the content read from project files.
[COMMAND_EXECUTION]: The skill uses the Bash tool to perform git commit operations to save the state of the repository during the handoff process.

gsd-pause-work