The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided materials and vault files.
Ingestion points: vault_path and input materials (ideation, literature, text) used for card creation in SKILL.md.
Boundary markers: No explicit delimiters are used to separate user-provided content from instructions.
Capability inventory: The skill is scoped to markdown file operations (create/update/read) within a specified directory; it does not have network access or shell execution capabilities.
Sanitization: Input is processed through a 'rewrite in your own words' step and a specific quality checklist, which naturally limits the impact of instructions embedded in source materials.
[SAFE]: The skill content is purely instructional and aimed at improving note-taking discipline. It does not perform network operations, execute arbitrary commands, or access sensitive system paths.

zettelkasten