The Agent Skills Directory

[PROMPT_INJECTION]: The skill processes untrusted external data, creating an indirect prompt injection surface.
Ingestion points: The agent reads and analyzes experiment logs, stderr output, and web content via WebFetch and WebSearch (Step 3, Progressive Loading section).
Boundary markers: Instructions do not explicitly mandate the use of delimiters or 'ignore embedded instructions' markers when handling these untrusted inputs.
Capability inventory: The skill uses Bash, Write, and Edit tools to perform debugging and update project memory documents.
Sanitization: No specific validation or escaping of ingested data is described in the instructions.
[COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute sanity checks and implementation tests (Step 4 and Step 6). This use is well-scoped and appropriate for the primary task of debugging ML code and training failures.
[DATA_EXFILTRATION]: The skill has network access through WebSearch and WebFetch to verify benchmarks and SOTA (Progressive Loading). This is a routine operation for a research tool and no evidence of sensitive data exfiltration or unauthorized external communication was found.

result-diagnosis