The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes external user-provided specifications and tickets, which creates a vulnerability surface for indirect prompt injection.
Ingestion points: The body of SKILL.md instructs the agent to implement work based on a 'spec or tickets'.
Boundary markers: Absent; there are no instructions to ignore embedded commands or delimiters to isolate the external content from the agent instructions.
Capability inventory: The skill performs command execution for typechecking and testing, and modifies the file system via git commits as described in SKILL.md.
Sanitization: Absent; the skill does not specify any validation or sanitization for the input data.
[COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for typechecking and running test suites within the local environment as defined in SKILL.md.

implement