The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the Microsoft.FeatureManagement.AspNetCore package from the official NuGet registry. This is a well-known service and a trusted library provided by Microsoft.
[INDIRECT_PROMPT_INJECTION]: The skill describes a pattern for custom feature filters that ingest untrusted data from external sources.
Ingestion points: The BrowserFeatureFilter class accesses IHttpContextAccessor to retrieve the User-Agent header from incoming HTTP requests.
Boundary markers: None are present in the code example; the header is processed directly to evaluate feature flags.
Capability inventory: The skill itself contains only documentation and code templates; it does not execute subprocesses, network operations, or file-writing logic itself.
Sanitization: The example code uses StringComparison.OrdinalIgnoreCase to check for specific browser strings, which is a standard logic check, but the input source itself remains untrusted.

dotnet-csharp-configuration