The Agent Skills Directory

[DATA_EXPOSURE_AND_EXFILTRATION]: The skill documentation explicitly references sensitive filesystem paths such as ~/.config/fnox/keys/identity.txt and ~/.ssh/age-identity.txt for storing private encryption keys.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from project configuration files which may come from untrusted sources. Ingestion points: Processes fnox.toml, fnox.local.toml, and external imports like shared-secrets.toml. Boundary markers: No delimiters or isolation warnings are implemented for configuration values. Capability inventory: The skill utilizes Bash, Read, Write, and Edit tools. Sanitization: There is no mention of sanitizing or validating configuration values before they are used in commands or logic.

fnox-configuration