The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify project source code, creating an attack surface where instructions embedded in data could influence agent behavior.
Ingestion points: The skill uses Read, Glob, and Grep tools to ingest content from the local file system (SKILL.md).
Boundary markers: Absent. There are no instructions to the agent to treat file content as data only or to ignore embedded instructions.
Capability inventory: The skill utilizes Bash for command execution (e.g., running tests) and Write for modifying the filesystem.
Sanitization: Absent. There is no evidence of input validation or content filtering for data read from the codebase before it is processed by the agent or executed via shell.

laravel-testing