The Agent Skills Directory

[PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection through Gitee issue content.
Ingestion points: Data enters the agent context through the list_repo_issues and get_repo_issue_detail tools (SKILL.md).
Boundary markers: Absent. The skill lacks explicit delimiters or instructions for the agent to ignore or isolate potentially malicious instructions embedded in the issue text.
Capability inventory: The skill has the ability to write to the repository using update_issue and comment_issue (SKILL.md).
Sanitization: Absent. No mention is made of sanitizing or validating issue content before it is analyzed or used to generate automated responses.

triage-issues