The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the GitHub CLI (gh) and git to manage development workflows. It includes a helper script, scripts/gitflow.sh, which encapsulates operations for branch management, Conventional Commits, and pull request creation. These operations are restricted to standard repository management tasks.
[PROMPT_INJECTION]: The skill processes untrusted data from GitHub issues via gh issue view --comments (ingestion point). This creates a surface for indirect prompt injection. However, the risk is mitigated by a multi-agent orchestration pattern (Plan -> Review -> Approve) and the mandatory use of quoted heredocs (<<'EOF') when passing issue data to CLI commands, which ensures that content is treated as literal text and prevents local shell command injection. The skill provides a robust capability inventory including git, gh, and bash while maintaining clear boundaries through role-specific prompts.

issue-driven-gitflow