The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill documentation provides an installation command npx skills add flyingsquirrel0419/squirrel-skill which instructs the user to download and execute code from a third-party community repository.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to audit and process existing codebases, which provides a surface for instructions embedded in data to influence agent behavior.
Ingestion points: The agent is instructed to read existing source files, documentation, and test files within the project directory (SKILL.md).
Boundary markers: There are no instructions defining delimiters or explicit warnings for the agent to ignore potential instructions contained within the files it audits.
Capability inventory: The skill has the capability to write or modify files, run tests, and execute shell commands for linting and formatting (SKILL.md).
Sanitization: The skill lacks explicit sanitization or validation steps for the content ingested from the external codebase before it is used to influence the 'Build' or 'Ship' phases.

squirrel