The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes standard development tools including git, rg (ripgrep), and package managers (pnpm, npm) to interact with the repository, inspect file status, and manage dependencies.
[EXTERNAL_DOWNLOADS]: The skill suggests installing the Stryker mutation testing framework and its plugins from official registries. Stryker is a widely recognized and well-known tool for quality assurance in JavaScript and TypeScript projects.
[DYNAMIC_EXECUTION]: The instructions involve creating a helper script (stryker-diff.mjs) to manage differential mutation testing. The skill provides specific security recommendations for this script, such as avoiding shell execution and properly handling whitespace or newlines in filenames using NUL-delimiters to prevent shell interpretation issues.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of repository file names and git diff outputs.
Ingestion points: Filenames and paths gathered via git diff --name-only and rg --files in SKILL.md (Step 1 and Step 3).
Boundary markers: The skill does not explicitly use prompt-level boundary markers for text ingestion, focusing instead on system-level command boundaries.
Capability inventory: Includes execution of shell commands, package manager interactions, and running Node.js scripts.
Sanitization: Recommends NUL-delimited record parsing for filenames in the diff helper, rejecting commas in file paths when using Stryker's --mutate option, and executing binaries without a shell to prevent argument injection.

mutation-testing