The Agent Skills Directory

[PROMPT_INJECTION]: The skill is designed to ingest context from local files such as .agents/product-marketing.md. This ingestion creates a surface for indirect prompt injection where an attacker could place malicious instructions in those project files to influence the agent's behavior when this skill is active.
Ingestion points: Reads configuration and context from .agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md (found in SKILL.md).
Boundary markers: The instructions do not provide delimiters or 'ignore' instructions when reading these external files, increasing the risk that the agent may follow instructions embedded within the data.
Capability inventory: The skill's primary capabilities involve generating text-based recommendations, lifecycle definitions, and metrics dashboards. No scripts for local command execution or file system modification are included in the skill package.
Sanitization: There is no specified logic for sanitizing or validating the content of the ingested context files before they are processed by the agent.

revops