The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses child_process.execSync in references/migration-tests.md to run database-related shell commands such as prisma, psql, and pg_dump.
[INDIRECT_PROMPT_INJECTION]: The skill implements a pattern that is vulnerable to command injection from database content. In references/migration-tests.md, a migration name is fetched from the _prisma_migrations table and directly interpolated into a shell command string executed via execSync.
Ingestion points: The value is read from the database table _prisma_migrations within the references/migration-tests.md file.
Boundary markers: No boundary markers or "ignore instructions" delimiters are used to wrap the untrusted data.
Capability inventory: The skill uses child_process.execSync for shell command execution (file: references/migration-tests.md).
Sanitization: The database-sourced value is interpolated into the shell command without escaping or validation, allowing for potential command injection.
[EXTERNAL_DOWNLOADS]: The skill suggests using npx to run tools like prisma and sequelize-cli, which fetches packages from the npm registry. These are well-known developer tools and registries.

database-testing