The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill acts as a manager that ingests untrusted user requirements to define project scopes and orchestrate development tasks, creating an attack surface for indirect injection.
Ingestion points: The skill gathers user requirements via the 'Project Scoping Process' and 'Adaptive Scoping Strategy' described in SKILL.md.
Boundary markers: There are no explicit instructions or delimiters mentioned to isolate user-provided logic from the orchestration commands used to delegate tasks to other capabilities.
Capability inventory: The skill performs file system operations (renaming and creating .pine files in the /projects/ directory) and coordinates multiple functional capabilities (Developer, Visualizer, Backtester).
Sanitization: The instructions lack specific validation or sanitization steps for user input before it is used to generate project specifications and file names.

pine-manager