The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources which may contain malicious instructions designed to influence the agent's behavior.
Ingestion points: The skill fetches content via gh issue view, gh pr view, and a Linear integration. It also reads from local file paths and clones external repositories.
Boundary markers: There are no explicit instructions to use delimiters or sanitization logic when interpolating external content into the agent's context.
Capability inventory: The skill has the ability to execute shell commands (gh, git, node) and write to the local file system (creating goal scratchpads).
Sanitization: No sanitization or filtering of external tracker data is specified before it is processed by the agent.
[COMMAND_EXECUTION]: The skill triggers the execution of system commands and local scripts as part of its standard workflow.
Evidence: It executes a local script at .agents/skills/autogoal/scripts/create-goal-scratchpad.mjs and utilizes CLI tools like gh and git to interact with remote services.

major-task