The Agent Skills Directory

[COMMAND_EXECUTION]: The skill specifies a mandatory memory protocol in SKILL.md that instructs the agent to execute cat .claude/context/memory/learnings.md to retrieve context.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes code files with modification capabilities.
Ingestion points: The skill targets all .svelte files using the **/*.svelte glob pattern defined in SKILL.md.
Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following instructions embedded within the analyzed .svelte files.
Capability inventory: The skill is granted Read, Write, and Edit tools, allowing it to modify the codebase based on potentially malicious content in processed files.
Sanitization: No sanitization or validation logic is present to filter out executable instructions from the data being analyzed.

seo-and-meta-tags-in-sveltekit