The Agent Skills Directory

[PROMPT_INJECTION]: The skill is vulnerable to Indirect Prompt Injection due to its core design of fetching and trusting external data sources.
Ingestion points: Untrusted external web resources, articles, and community forums (like subreddits) cited in RESOURCES.md and identified during research.
Boundary markers: Absent; the skill does not define specific delimiters or instructions to prevent the agent from obeying commands embedded in retrieved external text.
Capability inventory: The agent can write Markdown and HTML files, create assets in ./assets/, and is encouraged to execute CLI commands to open files.
Sanitization: Absent; there are no specified procedures for validating or filtering content retrieved from the web before it is processed or presented in lessons.
[COMMAND_EXECUTION]: The instruction in SKILL.md to "open the lesson file for the user by running a CLI command" creates a potential risk if the command or file path is influenced by content derived from untrusted external resources.

teach