The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform inventory tasks, such as tracing call sites with grep. While intended for analysis, the execution of commands on an untrusted codebase requires careful monitoring.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because its core function involves ingesting and analyzing external, potentially untrusted code or data.
Ingestion points: File paths, module names, or data sources provided in the Inputs section and processed during the Nigredo (Decomposition) stage.
Boundary markers: Absent. The instructions do not specify any delimiters or warnings to the agent to disregard instructions found within the code being analyzed.
Capability inventory: Access to Bash, Write, Edit, Read, Grep, and Glob tools across all steps of the transformation.
Sanitization: Absent. There is no mention of sanitizing or escaping the content of the files being processed before they are analyzed or manipulated.

athanor