The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes Git and GitHub CLI commands to manage repository state and pull requests. Evidence includes calls to subprocess.run in scripts/worktree-audit.py and spawn in scripts/watch-pr/github.ts. These operations are limited to standard development tools like git and gh for repository maintenance and pull request monitoring.
[EXTERNAL_DOWNLOADS]: The skill uses bun install in scripts/bootstrap.ts to set up its execution environment by fetching standard Node.js/TypeScript dependencies from official registries. It also references its own source repository on GitHub for maintenance and updates.
[INDIRECT_PROMPT_INJECTION]: The skill triages external data such as pull request comments and automated review feedback. The attack surface is mitigated by instructions in references/bugbot-triage.md which guide the agent to verify automated findings before acting. Ingestion occurs in scripts/watch-pr/github.ts via the GitHub API, and capabilities include local file writes and command execution.
[DYNAMIC_EXECUTION]: The scripts/bootstrap.ts script prepares a local runtime by copying skill scripts to a cache directory and executing them. This is used to ensure dependencies are installed and to run the TypeScript-based tools for PR watching and orchestration.

pstack-mode