The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill defines a system for creating resource handlers that process untrusted user parameters. 1. Ingestion point: Resource schemas in src/resources/ (e.g., filename parameter in Template E). 2. Boundary markers: Absent. 3. Capability inventory: Templates include file system access via fs/promises (readFile). 4. Sanitization: Absent; Template E demonstrates direct use of a user-provided string in a file path without validation against path traversal.
[DATA_EXFILTRATION]: The provided code templates facilitate reading from the local file system using user-controlled parameters. Template E in references/patterns.md reads content from a path constructed using a user-controlled parameter (filename) without proper validation, potentially allowing unauthorized access to files outside the intended directory via path traversal.

resource-design