The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses standard development tools including git and the GitHub CLI (gh) to automate branch management, merging, and pull request creation. These commands are executed locally within the repository context.
[EXTERNAL_DOWNLOADS]: The skill utilizes npx to run commands from the @ericrisco/rsc package. Since the skill is authored by 'ericrisco', these are recognized as legitimate vendor-owned resources and do not represent a security risk.
[DATA_EXFILTRATION]: The skill implements a proactive security check that scans git diff output for potential secrets such as API keys and private keys before allowing a branch to be shipped. While this involves accessing repository data, it is a protective measure to prevent accidental exposure.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project documentation (e.g., config.yaml, user-profile.md) and git logs to inform its recommendations.
Ingestion points: Reads project configuration and history from 02-DOCS/wiki/ and git log.
Boundary markers: None explicitly defined for file-based data ingestion.
Capability inventory: Executes local shell commands (git, gh, npx) and writes to local archive files.
Sanitization: No specific sanitization or validation of the input documentation is performed.

ship