The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external project files (PLAN.md) to define architectural constraints, creating a surface for indirect instructions.
Ingestion points: The wednesday-skills drift command (referenced in SKILL.md) reads user-defined boundaries and rules from PLAN.md.
Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between data and potentially malicious instructions embedded in the processed configuration files.
Capability inventory: The skill is authorized to execute wednesday-skills drift and git log commands using the Bash tool.
Sanitization: The instructions do not define sanitization or validation steps for the content parsed from PLAN.md before it is interpreted by the agent.
[COMMAND_EXECUTION]: The skill executes specific shell commands through the Bash tool.
Evidence: The skill is granted permissions for Bash(wednesday-skills drift *) and Bash(git log *). These are scoped to the vendor's own utility and standard git operations.

brownfield-drift