The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes standard development tools, including php artisan tinker for executing database queries and lsof for verifying network tunnel status. These commands are restricted to the context of the local task worktree and are used for monitoring purposes.- [DATA_EXFILTRATION]: While the skill directs the use of a read-only production database replica (prod_read) via a jumphost tunnel, it incorporates specific security constraints to prevent the exposure of sensitive information. It explicitly instructs the user to avoid personal fields such as names, addresses, or message bodies, focusing solely on aggregate data like counts and sums.- [INDIRECT_PROMPT_INJECTION]: The skill ingests results from external database queries into the agent's context. The risk of unintended behavior is mitigated by guidelines that limit the query scope to aggregate data and the absence of patterns where this data is used to dynamically construct subsequent executable commands.

sociuu-before-and-after