The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute mkdir -p and mv commands for file organization. This is the intended primary purpose of the skill. To mitigate risk, the instructions mandate that the agent must analyze the directory first, present a plan to the user, and wait for explicit confirmation before executing any commands.
[PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted file names from the user's filesystem which could contain malicious instructions.
Ingestion points: The skill reads directory contents and file names using the Glob and Read tools as well as the ls command (SKILL.md, Step 1).
Boundary markers: Present. The skill instructions require the agent to clearly delimit the organization plan and wait for user confirmation (SKILL.md, Step 3).
Capability inventory: The skill uses Bash to create folders and move files (SKILL.md, Step 4).
Sanitization: No explicit sanitization of file names is mentioned; safety depends on the human-in-the-loop confirmation process.

file-organizer