The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the spx CLI tool (accessed via opencli spx) to perform Gitea repository operations such as creating issues and posting comments. These operations are restricted to the repository context and align with the skill's stated purpose.- [PROMPT_INJECTION]: The skill involves reading and merging orchestration state stored as JSON in issue comments. While this represents a surface for indirect prompt injection, the risk is mitigated by the use of a strict JSON schema (references/state-json.schema.json) that validates inputs and prevents the ingestion of arbitrary fields using additionalProperties: false.- [SAFE]: All external resources and tools identified are associated with the author's (cruldra) development ecosystem (superpowers-vscode). The skill follows secure practices by documenting credential storage locations rather than requesting or hardcoding them.

using-spx-cli