The Agent Skills Directory

[Indirect Prompt Injection] (LOW): The skill processes untrusted codebase files which may contain instructions designed to manipulate the LLM.\n
Ingestion points: Source code files are read using the Read, Grep, and Glob tools.\n
Boundary markers: There are no instructions for the agent to use delimiters or ignore embedded instructions when reading file content.\n
Capability inventory: The skill is limited to Read, Grep, and Glob. It cannot write files, access the network, or execute code, which prevents high-severity exploitation.\n
Sanitization: No sanitization is performed on the ingested code.

architecture-review