The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted log data which could contain malicious instructions designed to exploit the agent's capabilities.
Ingestion points: The skill accepts log excerpts directly from the user or reads them from files on the filesystem as specified in SKILL.md.
Boundary markers: There are no specific instructions or delimiters mentioned to ensure the agent ignores instructions that might be embedded within the logs it analyzes.
Capability inventory: The agent has the authority to read local source code, search for text, implement code fixes (file writes), and execute build commands (dotnet build) as described in the workflow of SKILL.md.
Sanitization: The skill lacks content validation or sanitization for the logs it ingests before processing them.
[COMMAND_EXECUTION]: The skill involves the execution of shell commands within the project environment.
Evidence: Workflow step 7 in SKILL.md explicitly instructs the agent to execute dotnet build to verify code changes.
[DYNAMIC_EXECUTION]: The skill utilizes runtime compilation as part of its standard verification process.
Evidence: The use of dotnet build in SKILL.md constitutes a subprocess call to a compiler/build system to process the modified source code.

triage-runtime-logs