The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze potentially untrusted external data such as error logs, stack traces, and reproduction steps, which constitutes a vulnerability surface for indirect prompt injection.
Ingestion points: The skill instructions prompt users to provide full error messages, stack traces, and code snippets in SKILL.md.
Boundary markers: The skill lacks explicit delimiters or instructions to treat provided error data as non-executable text.
Capability inventory: The skill references several powerful CLI capabilities including docker, npm, php artisan, and cargo across multiple reference files.
Sanitization: There are no sanitization or validation protocols defined for the ingested data.- [COMMAND_EXECUTION]: The skill suggests several diagnostic shell commands, such as tail -f, docker logs, and project-specific CLI tools like php artisan optimize:clear and nuxi typecheck. These commands are standard for developer workflows and are used here for troubleshooting.
[PRIVILEGE_ESCALATION]: In references/common-errors.md, the skill documentation suggests using sudo chown to resolve file permission issues. This is a common administrative task recommended for manual execution by the user to fix environment-related access problems.

error-resolution