The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and modify project files based on their content, creating a surface where malicious instructions embedded in the source code could influence the agent's actions.
Ingestion points: The agent is directed to process files within a user-provided project directory or root, specifically .d.ts, .js, and tsconfig.json files.
Boundary markers: The skill lacks explicit instructions for the agent to use delimiters or specific logic to ignore instructions that might be embedded within the project files being reviewed.
Capability inventory: The workflow requires the agent to read source files, perform manual edits to type definitions, and commit changes to the repository.
Sanitization: There are no documented requirements for sanitizing or validating the content extracted from the project files before it is used to inform the agent's edits.

wdk-review-dts