The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes several bash scripts (scripts/collect-diff.sh, scripts/detect-angular-version.sh, scripts/run-checks.sh) which in turn call system commands like git, python3, and the Angular CLI (ng via npx). These are intended for the skill's primary purpose of code review.
[DYNAMIC_EXECUTION]: The bash scripts utilize embedded Python code passed via heredocs to perform complex JSON parsing and data extraction from package.json and angular.json files. While the Python code is static and used for data processing, it represents a pattern of runtime script execution.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and summarize code diffs from a repository, which may contain untrusted content provided by external contributors.
Ingestion points: The git diff payload collected in scripts/collect-diff.sh is passed to the agent for review in Step 6 of SKILL.md.
Boundary markers: The skill does not explicitly define markers to segregate code content from review instructions when passing the diff to the model.
Capability inventory: The skill has capabilities to execute shell scripts, run development tools via npx, and write reports to the local file system (docs/reviews/).
Sanitization: scripts/collect-diff.sh and scripts/run-checks.sh use Python's json.dumps to escape data before including it in the JSON output, reducing the risk of shell or JSON injection.

angular-reviewer