The Agent Skills Directory

[DYNAMIC_CONTEXT_INJECTION]: The skill executes git branch and gh pr view at load time using the ! syntax to initialize context. This is used legitimately to determine the current state of the workspace.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PR template files from the repository.
Ingestion points: Searches for and reads pull_request_template.md and files within .github/PULL_REQUEST_TEMPLATE/ using the Read tool in SKILL.md.
Boundary markers: None. The skill does not instruct the agent to disregard instructions within these templates.
Capability inventory: The agent can perform git push and use the GitHub CLI (gh) to create or edit PRs as defined in allowed-tools.
Sanitization: The skill lacks mechanisms to sanitize or validate the content of the ingested templates before including them in the PR body.
[COMMAND_EXECUTION]: The skill uses standard developer tools (git, gh) to push code and manage pull requests on GitHub, which is the intended use case. These commands are correctly scoped in the frontmatter configuration.

pr