The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands, including gh for GitHub interaction, grep for secret scanning, and mktemp for secure temporary file handling. These are scoped to the primary task of gathering system information and filing reports.
[EXTERNAL_DOWNLOADS]: The skill uses npx to execute @celo/buy@0.5.0 to verify the installed version. This is a package owned by the skill's author (celo-org) and is used for environment diagnostic purposes.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from error logs and user descriptions to generate reports. This risk is mitigated by explicit instructions to never file without user review of the final content and a comprehensive list of redaction rules for sensitive data.
[DATA_EXFILTRATION]: The skill's primary function is to send user-approved data to a public GitHub repository. This is the intended primary purpose of the skill. To prevent accidental exposure, the skill implements a 'backstop scan' using grep and requires explicit user consent before any data is sent.

file-feedback