The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands to manage the git workflow, including branch switching, merging, and committing. It also executes a local synchronization script bash scripts/common/sync-version.sh to update version identifiers across the repository.- [EXTERNAL_DOWNLOADS]: The skill performs network operations via git pull and git fetch to synchronize the local environment with the remote origin repository.- [DATA_EXFILTRATION]: The skill uses git push to transmit local repository changes, including version files and generated documentation, to the remote server.- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8) because it processes untrusted input from commit messages and code diffs to generate release notes.
Ingestion points: SKILL.md (§4) directs the agent to read output from git log and git show to identify changes.
Boundary markers: The instructions do not define delimiters or provide warnings to the agent to ignore instructions embedded within the git history data.
Capability inventory: The agent has permissions to write to multiple project files and execute shell commands and repository scripts.
Sanitization: There is no evidence of sanitization or filtering applied to the commit summaries or diffs before they are interpolated into the documentation generation process.

cutting-a-release