The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/auto_commit.py executes Git commands using subprocess.run. The implementation is secure as it uses the list format for arguments and avoids shell=True, which prevents shell injection vulnerabilities.
[SAFE]: The GitHub Actions templates provided in templates/ci-cd.yml and templates/release.yml demonstrate secure practices by utilizing GitHub Secrets (e.g., ${{ secrets.API_KEY }}) for sensitive credentials instead of hardcoding them.
[SAFE]: No evidence of data exfiltration, unauthorized network access, or malicious prompt injection was detected across the skill files. The script's behavior aligns with its documented purpose of automating git operations.

github-workflow-automation