The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to perform standard software development operations, including running test suites (pytest, npm test, cargo test), managing git repositories (tagging, branching, pushing), and building distribution packages. These operations are conducted within the local repository context and are necessary for the skill's stated purpose.
[EXTERNAL_DOWNLOADS]: The skill interacts with well-known package registries (PyPI, npm, crates.io) and GitHub using official CLI tools (twine, npm, cargo, gh). These actions are restricted to publishing verified releases and verifying CI status, aligning with legitimate software engineering workflows.
[DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were detected. While the skill reads repository metadata and git history, this data is used exclusively for generating changelogs and verifying release readiness for the user.
[PROMPT_INJECTION]: The instructions do not contain any patterns designed to bypass safety filters or override agent behavior. The skill defines strict operational constraints, such as the requirement for user confirmation before publishing and the prohibition of force-pushes.
[CREDENTIALS_UNSAFE]: The skill includes a dedicated 'Security Gate' that proactively scans for secrets, API keys, and environment files (.env) within the repository to prevent accidental exposure of sensitive information during the release process.

release-engineer