The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructions suggest that the agent use the system date command to generate precise UTC timestamps for its session recording feature.
[INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface where it ingests and processes untrusted user data (the 'subject') to perform its analytical tasks.
Ingestion points: The user-supplied subject via the /map-out command described in README.md.
Boundary markers: No explicit delimiters or safety instructions are defined to separate the user subject from the agent's internal logic.
Capability inventory: The skill utilizes file-write and file-read capabilities in SKILL.md for session persistence, and executes the date command for timestamping.
Sanitization: There is no evidence of input validation or escaping for the user-provided subject.

map-out