The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes shell commands via the Bash tool to manage version control and interact with GitHub.
The skill is authorized to use git status, git diff, git log, git rev-parse, git push, and gh pr create.
These tools are aligned with the stated purpose of automating pull request creation and are used to gather metadata and push code changes.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository's history and current diffs, creating an attack surface for indirect prompt injection.
Ingestion points: Untrusted data enters the agent context through the output of git diff and git log (SKILL.md).
Boundary markers: No specific delimiters or instructions are provided to the agent to treat content within the diffs as data rather than instructions.
Capability inventory: The skill possesses write capabilities including pushing to remote branches (git push) and creating pull requests (gh pr create) (SKILL.md).
Sanitization: No escaping, validation, or filtering is performed on the content retrieved from the Git history before the agent processes it.
Note: While the surface exists, this is a standard risk for tools that analyze source code.

create-pr