The Agent Skills Directory

[COMMAND_EXECUTION]: The relay.mjs script executes the qodercli tool and git to manage implementation tasks and track file changes. These executions are performed using standard Node.js APIs with shell: false, which effectively prevents command injection vulnerabilities.
[DYNAMIC_EXECUTION]: The relay script dynamically locates and executes a helper script (lane.mjs) from a relative path (../../delegate-setup/scripts/lane.mjs). This is used to resolve configuration for 'fleet lanes' and is a localized operation within the expected agent environment.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function is to pass instructions (a 'brief') to an external implementer (qodercli). This implementer has permissions to modify the workspace and execute commands. To mitigate the risk of malicious or incorrect output, the skill includes extensive documentation and instructions (in SKILL.md and references/review-and-land.md) requiring the orchestrator to perform independent diff reviews and run project gates before committing changes.
[EXTERNAL_DOWNLOADS]: The documentation provides links to the official Qoder website (docs.qoder.com) for installing the required CLI tool. These references point to official vendor resources and are documented neutrally.

qoder-delegate