The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources, specifically audio files (FUZ, XWM, WAV) and game archives (BSA).
Ingestion points: audio info reads metadata from files in SKILL.md; archive extract lists and extracts contents of BSA files.
Boundary markers: Absent. The instructions do not define specific delimiters to separate untrusted file content from system instructions.
Capability inventory: The skill executes commands via dotnet run, reads files, and writes/extracts files to the filesystem.
Sanitization: Absent. No explicit sanitization of file metadata or archive paths is mentioned before presenting them to the agent.
[COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using dotnet run. These commands incorporate user-supplied file paths as arguments, which could be exploited if the underlying tool does not safely handle shell characters.
[DYNAMIC_EXECUTION]: The skill utilizes dotnet run --project src/SpookysAutomod.Cli, which involves runtime compilation and execution of a local C# project. While standard for developers, this represents dynamic code execution at runtime.

skyrim-audio