The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, including JSON output from the finfocus tool and user-defined configuration in .cost-check.yml. While these inputs are entry points for data, the skill's limited capabilities (writing markdown and terminal output) present a negligible attack surface.
[COMMAND_EXECUTION]: The skill performs environment checks using 'ls' and 'command -v', and executes 'finfocus' and 'markdownlint'. These shell operations are necessary for its functionality and are targeted at specific, expected utilities.

cost-drift