The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill configures the pre-commit framework to fetch hooks from well-known and trusted organizations including the Python Software Foundation (psf/black), PyCQA (flake8, isort), Yelp (detect-secrets), and Commitizen. These are standard industry tools for maintaining code quality.
[INDIRECT_PROMPT_INJECTION]: The scripts/scaffold-tests.sh script is designed to ingest local source code files to generate test stubs. While this technically creates a surface where malicious input code could influence generated output, it is a primary documented function of the skill and operates within the local file system context.
[COMMAND_EXECUTION]: Provides Node.js and Bash scripts intended to be executed as Git hooks. These scripts perform standard development tasks such as running npx prettier, npm test, and git add on staged files.
[DATA_EXPOSURE]: Includes a dedicated secret-detection-hook.md which provides a script to proactively prevent the commit of sensitive data (passwords, API keys) by scanning staged changes.

git-hooks-setup