The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the fallow package globally via npm install -g fallow if it is not present. This introduces an unversioned external dependency from the npm registry.
[COMMAND_EXECUTION]: The skill executes shell commands to perform audits and check project status, including fallow audit, fallow --version, and git diff.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project files, which could contain malicious instructions aimed at influencing the agent's behavior. 1. Ingestion points: Reads all source code files during the review process. 2. Boundary markers: No delimiters or instructions are provided to the agent to ignore instructions embedded within the analyzed code. 3. Capability inventory: The skill can execute shell commands and automatically modify files by applying 'safe fixes'. 4. Sanitization: No sanitization or validation is performed on the ingested code content.

find-mismatch