The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to run standard development commands for project validation, including npm test, npm run typecheck, and npm run build. These are typical actions for a software development workflow and do not pose a security risk in the context of contributing to a repository.
[INDIRECT_PROMPT_INJECTION]: The skill involves the agent modifying repository content like documentation and source code. While this technically constitutes an ingestion of untrusted data if the repo is compromised, the skill does not expose dangerous capabilities or bypass safety guardrails.

contributing