The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to use local shell commands (git config user.email, git remote -v, and date +%Y) to gather project metadata. These operations are restricted to identifying project ownership and the current year for copyright purposes. No sensitive data is targeted, and no network exfiltration is attempted.
[SAFE]: The skill uses domains and identifiers (atvari.eu, atvari GmbH) that belong to the authoring organization. These resources are handled appropriately within the skill's intended functionality for copyright management.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files (LICENSE, README, git config) to determine ownership. While this creates an input surface, the logic is limited to identifying specific strings and does not grant the skill capabilities that could be exploited via malicious content in those files.

atvari-copyright