The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous examples for executing the GitHub CLI (gh) and jq utilities. These commands include administrative actions such as merging pull requests, creating issues, and triggering GitHub Actions workflows.
[EXTERNAL_DOWNLOADS]: The documentation references the installation of gh and jq via Homebrew (brew install). These are widely recognized, official tools from trusted sources.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it is designed to ingest and process data from external sources (GitHub PRs, issues, and API responses) which may contain malicious instructions provided by third parties.
Ingestion points: Data is ingested via gh pr view, gh issue list, and gh api calls as defined in SKILL.md.
Boundary markers: No explicit boundary markers (e.g., XML tags) or instructions to ignore embedded commands are present in the provided examples.
Capability inventory: The skill allows for significant repository modifications, including gh pr merge, gh issue close, and gh workflow run.
Sanitization: There is no evidence of sanitization or filtering logic applied to the data retrieved from GitHub before it is processed by the agent.

c-github