The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes git and gh CLI tools to automate repository management tasks, including branch creation, tagging, and release publication. All destructive or external actions are gated by explicit user confirmation.
[EXTERNAL_DOWNLOADS]: The skill interacts with GitHub APIs through the gh tool to synchronize project data, which is standard for its documented purpose.
[PROMPT_INJECTION]: The skill ingests untrusted data from project files (e.g., package.json, Cargo.toml) and git history to automatically generate issue content and release notes, creating an indirect prompt injection surface.
Ingestion points: Manifest files (package.json, Cargo.toml, etc.) and git log.
Boundary markers: Employs consistent templates for issue and PR bodies.
Capability inventory: Significant mutation capabilities via git and gh tools across multiple procedure steps.
Sanitization: Relies on the mandatory 'preview → confirm → mutate' contract to ensure all generated content is reviewed by the operator before execution.

ship-cycle