The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a wide range of administrative shell commands via git and gh (GitHub CLI) to manage the release lifecycle.
Evidence includes: git switch, git push, git tag -s, gh pr merge, gh pr checks, and gh api calls to resolve review threads.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from GitHub pull request titles and descriptions to generate upstream changelog entries.
Ingestion points: External data is fetched using gh pr list and gh pr view as described in the 'Selecting the PRs' section of SKILL.md.
Boundary markers: None identified. The instructions direct the agent to "Use the PR title from GitHub" directly into the CHANGELOG.md file.
Capability inventory: The skill has access to the full git and gh toolsets, enabling branch modification, tag creation, and pull request merging.
Sanitization: There are no instructions for sanitizing or escaping the content retrieved from GitHub before it is included in the changelog or commit messages.
[DYNAMIC_EXECUTION]: The skill utilizes runtime shell scripts for continuous monitoring of pull request statuses.
Evidence: A multi-line while loop is used to poll gh pr view output and conditionally break based on the mergeStateStatus and reviewDecision values in SKILL.md.

flux-controller-minor-releases