The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external, potentially untrusted documents to generate technical specifications, creating a surface for indirect prompt injection.
Ingestion points: The skill reads vision.md, requirements.md, and various source code files from the backend/ and frontend/ directories.
Boundary markers: There are no explicit instructions to use delimiters or ignore potentially malicious instructions embedded within the ingested requirement or vision documents.
Capability inventory: The skill's capabilities are limited to reading local files and generating text documentation. It does not perform network operations or execute shell commands.
Sanitization: The skill does not specify any sanitization, filtering, or validation steps for the content retrieved from the analyzed project files.

feature-spec