The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, potentially untrusted data in the form of specifications or tickets, which creates a surface for indirect prompt injection. * Ingestion points: The instructions in SKILL.md direct the agent to 'Implement the work described by the user in the spec or tickets.' * Boundary markers: There are no explicit delimiters or instructions defined to prevent the agent from following malicious commands that might be embedded within the provided specs or tickets. * Capability inventory: The skill body implies capabilities for writing code, executing tests, and committing changes to a repository. * Sanitization: The skill does not include any verification or sanitization steps for the input data.

implement