The Agent Skills Directory

[SAFE]: The skill is a set of instructions for managing project state using provided tools. It does not contain executable code, remote downloads, or obfuscated content.
[DATA_EXPOSURE]: The skill mentions managing project files but emphasizes respecting .gitignore to avoid derived or sensitive directories like node_modules or venv.
[PROMPT_INJECTION]: The skill involves reading project data which presents an inherent indirect prompt injection surface. However, it includes a verification step (vigil_diff) in its recommended workflow, allowing the user to review changes before a restoration is applied.

claude-vigil