The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill defines a document model that includes fields for agent instructions and learner orientations, such as systemPrompt and learnerBrief within the Project-Based Learning (PBL) project structure. Because the patch_stage tool allows writing arbitrary values to these paths, it creates a surface where malicious instructions could be embedded in the document.
Ingestion points: The patch_stage tool is used to update fields in SKILL.md and references/pbl.md.
Capability inventory: The toolset includes patch_stage for writing and read_stage for reading scene content.
Boundary markers: There are no documented delimiters or instructions to treat user-supplied input as untrusted when patching these fields.
Sanitization: The documentation does not specify sanitization for the instructional fields, though it mentions rendering-level sanitization for visual styles.
[DYNAMIC_EXECUTION]: The interactive widget content model allows for the storage and execution of complete HTML documents within the html field, which are rendered via iframe srcDoc. While this is a core functionality for the intended course platform, it provides a mechanism for dynamic code execution within the learner's context.

stage-dsl