The Agent Skills Directory

[DATA_EXPOSURE]: The skill accesses .claude/project-context.md or .cursor/project-context.md to gather context about the project's offers and audience. This is standard behavior for project-aware tools and does not involve exfiltration to external domains.
[INDIRECT_PROMPT_INJECTION]: There is a potential surface for indirect prompt injection as the skill reads project context files which may contain untrusted data. However, the skill only uses this data to generate design suggestions and lacks capabilities like command execution or network access, making the risk negligible.

popup-generator