The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses git status to identify changed files and grep to detect violations in CSS files. These are standard operations for a code review and linting tool and are used within the scope of the skill's stated purpose.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by reading the content of local CSS files. It utilizes string replacement tools to apply fixes. While the input data is external, the capability is restricted to static string mapping for CSS tokens, which does not present a path for command execution or safety bypass. The risk is minimized by the use of defined mapping tables and a reporting mechanism for manual review.

ui4-review