The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/adr-lint.py uses subprocess.run to call git rev-parse --show-toplevel. This is a benign use of the local git binary to identify the repository's root directory for path resolution. The command is executed with a fixed argument list and does not invoke a shell, protecting against injection.
[INDIRECT_PROMPT_INJECTION]: The skill processes ADR files which are user-controlled markdown documents. It implements proper security boundaries by using yaml.safe_load() in scripts/adr-lint.py to parse metadata, preventing potential unsafe deserialization attacks. The scripts primarily perform regex-based validation and string manipulation to maintain the ADR index and format.
[EXTERNAL_DOWNLOADS]: The skill references the PyYAML Python package and the yq command-line utility. Both are standard tools in development environments. The Python scripts include fallback logic to a minimal internal parser if the external library is missing, and the shell scripts announce when they are falling back from yq to standard Unix utilities like sed and awk.

adr-ops