The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes platform-native tools such as create_file, load_skill, and cat_file to manage migration tasks. These operations are restricted to the user's SharePoint environment and are governed by a human-in-the-loop approval process before any file system changes occur.
[PROMPT_INJECTION]: The skill processes untrusted data from external sources like OneDrive or ZIP uploads, which constitutes an indirect prompt injection surface. This could potentially allow a malicious source skill to influence the output of the conversion process.
Ingestion points: Phase 1 includes reading SKILL.md and supporting files from OneDrive links and user uploads.
Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when reading source content.
Capability inventory: The skill has permission to read files (cat_file) and write files (create_file) within the SharePoint directory.
Sanitization: There is no explicit requirement to sanitize or validate the content of the ingested files before processing.
Mitigation: The risk is addressed by the Phase 4 requirement to stop and present a conversion plan for manual user review and approval before implementation.

convert-cowork-skill-to-sharepoint