The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the GitHub CLI (gh) to list, view, and dispatch workflows. These are standard operations for CI/CD management within a developer-oriented skill. All operations target the vendor's repository (ComposioHQ/composio).
[REMOTE_CODE_EXECUTION]: The skill triggers remote GitHub Actions workflows (build-cli-binaries.yml) using gh workflow run. This is an intended function of the skill to manage releases and is restricted to the project's own infrastructure.
[DATA_EXPOSURE]: The skill reads public release metadata and workflow status from GitHub. No sensitive files (like .env or SSH keys) are accessed or transmitted.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data from GitHub CLI outputs (release tags, commit SHAs). While this represents a theoretical attack surface, the skill includes explicit human-in-the-loop confirmation steps before performing destructive actions (like stable promotions) and uses these values as arguments to well-defined CLI commands, minimizing injection risk.

cli-release