The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes code files to generate documentation updates, which creates a potential surface for indirect prompt injection if the source code contains malicious instructions.
Ingestion points: The skill researches current code state using Read, Grep, and Glob tools across the repository (SKILL.md Step 2).
Boundary markers: No explicit boundary markers or instructions are provided to ensure the agent disregards instructions that might be embedded in the code it is analyzing.
Capability inventory: The skill has Write and Edit capabilities to modify files, and Bash(node:*) which is used to execute analysis scripts such as scripts/lib/doc-metadata.js.
Sanitization: There is no evidence of sanitization or filtering of the ingested code content before it is processed or used to update documentation.

update-docs