The Agent Skills Directory

[Indirect Prompt Injection] (LOW): The skill reviews external, untrusted code which could contain malicious instructions designed to manipulate the agent.\n
Ingestion points: The skill is designed to read and review TypeScript/JavaScript diffs and pull request content via the Read and Glob tools.\n
Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the guidelines or skill metadata.\n
Capability inventory: The skill uses Bash, Read, Grep, and Glob tools, which are powerful capabilities that could be targeted by an injection attack.\n
Sanitization: There is no evidence of sanitization, escaping, or validation of the code content before it is processed by the agent.

typescript-review