The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands including mkdir -p for directory creation, git commit for version control, and pnpm ai-hero-cli internal lint for validation. These operations are core to the skill's primary purpose of project scaffolding.
[INDIRECT_PROMPT_INJECTION]: The skill processes external input (an exercise plan) to dynamically generate directory names and markdown file content.
Ingestion points: The skill parses a 'plan' provided in the context or by the user to extract section and exercise titles (referenced in SKILL.md).
Boundary markers: There are no explicit markers or safety instructions defined to prevent the agent from interpreting malicious instructions that might be embedded within the exercise titles or plans.
Capability inventory: The skill is granted filesystem write access and the ability to execute shell commands (mkdir, git, pnpm) across its scripts (referenced in SKILL.md).
Sanitization: The instructions do not include steps to sanitize or validate the content of the plan before using it to create filesystem objects or file content.

scaffold-exercises