The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files such as SESSION.md and IMPLEMENTATION_PHASES.md to automate planning and session resumption. While this constitutes an attack surface where maliciously crafted files could influence agent behavior, the risk is minimal as the skill operates within the user's controlled project environment and performs standard project management tasks.
[EXTERNAL_DOWNLOADS]: The /release command identifies if gitleaks is missing and provides a link to download it from the official GitHub repository (https://github.com/gitleaks/gitleaks). This is a reference to a well-known security utility used for safety checks and does not involve the execution of untrusted code.
[COMMAND_EXECUTION]: The skill utilizes several standard command-line tools such as git, npm, and the GitHub CLI (gh) to perform its duties. These operations are transparently described in the command documentation and are typical for development-oriented agent skills.

project-workflow