The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external component source code and test files to verify UI behaviors. While no malicious content is present, the process of reading untrusted code files represents an indirect prompt injection surface where comments or strings in the analyzed code could attempt to influence the agent's decision-making logic.
[COMMAND_EXECUTION]: The skill uses the Bash tool to execute local development commands such as npx vitest run and storybook test. This is the primary function of the skill and is limited to standard testing frameworks. No evidence of command injection or malicious shell redirection was found.

qa-component-behavior