The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the user's local codebase. This creates a surface where malicious instructions hidden in code comments or documentation could attempt to influence the agent's behavior. However, the skill mitigates this by enforcing readonly: true for all subagents, preventing them from modifying the environment.
Ingestion points: File exploration using Glob and Grep in the user's workspace.
Boundary markers: Not explicitly defined in the instruction set.
Capability inventory: Read-only access to the filesystem; no network or write capabilities are requested.
Sanitization: No explicit sanitization of codebase content is mentioned.
[COMMAND_EXECUTION]: The skill orchestrates the use of standard filesystem exploration tools such as Glob and Grep through subagents. These commands are limited to discovery and reading within the project scope, which is standard for architectural analysis tools.

how