The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes Git commands (git diff, git merge-base, etc.) and optional producer scripts to gather evidence for PRs. These executions are hardened with timeouts, byte-count limits, and, in the case of generic producers, a restricted environment that resets the system PATH to os.defpath to prevent command injection or unexpected tool invocation.
[DATA_EXFILTRATION]: As part of its core functionality, the skill uploads development transcripts and repository diffs to a configured Team Room server. This process is transparently described in the documentation and is protected by a multi-stage sanitization engine in evidence/sanitize.py that redacts common secrets such as AWS keys, GitHub tokens, private keys, and database connection strings before they leave the local environment.
[SAFE]: The skill demonstrates high security maturity through the use of atomic file operations, strict 0600 permission checks for internal handoff files, and thorough validation of all remote data against versioned JSON schemas.

team-room