The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to systematically read and analyze external codebase files. This creates a surface for indirect prompt injection where malicious instructions embedded in the audited code could attempt to influence the agent's report or subsequent code generation.
Ingestion points: Codebase files are ingested as instructed in SKILL.md to perform the audit process.
Boundary markers: The skill does not define specific delimiters or instructions to treat the analyzed code as data rather than instructions.
Capability inventory: The agent is authorized to conduct security reviews, generate code fixes, and suggest architectural changes based on the data it reads.
Sanitization: There are no built-in mechanisms described to sanitize the input code before it is processed by the agent.

vibe-security