The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data for filesystem operations.
Ingestion points: The skill provides instructions for handling untrusted path segments, user input, and scraped titles within file operations in SKILL.md.
Boundary markers: The documentation explicitly advocates for using pathologize.Join to ensure untrusted parts are contained within a trusted root directory and warns against using CleanPath for untrusted input.
Capability inventory: The skill leverages the fileflow library which performs file moves, copies, and renames on the host filesystem as described in SKILL.md.
Sanitization: The core functionality of the recommended pathologize library is to sanitize filenames by stripping illegal characters, trimming whitespace, and neutralizing reserved system names.

fileflow-pathologize