The Agent Skills Directory

[COMMAND_EXECUTION]: The provided shell scripts (bump-formula.sh, check-release-readiness.sh) utilize standard development tools such as git, gh, and goreleaser to manage repository state and facilitate software publishing. These operations are appropriate for the skill's primary purpose of release management.
[CREDENTIALS_SAFE]: The skill requires a TAP_GITHUB_TOKEN for cross-repository publishing. This token is used in the bump-formula.sh script via the x-access-token pattern to authenticate git clone and git push operations, which is a standard and necessary procedure for GitHub Actions that push to other repositories.
[INDIRECT_PROMPT_INJECTION]: The check-release-readiness.sh script ingests content from external repositories (e.g., Homebrew formulae via GitHub API) to perform version comparison and configuration audits.
Ingestion points: Fetches formula content from GitHub using gh api in scripts/check-release-readiness.sh.
Boundary markers: Not present; the script performs basic string parsing on the retrieved content.
Capability inventory: Limited to read-only auditing and local Git/GH operations; no file-write or subprocess execution is triggered by the ingested content.
Sanitization: The script uses grep, sed, and awk to extract specific fields rather than executing the content.
[SAFE]: The skill follows established best practices for software distribution, including the use of checksums, cross-compilation matrices, and automated version bumping via official GitHub workflows.

cli-release-distribution