The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the gh (GitHub CLI) tool to perform API requests. It invokes subprocess.run with a list of arguments, which is a secure pattern that prevents shell command injection.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the GitHub API, such as workflow names and statuses. While this data is returned to the agent, the risk is mitigated by strict normalization and filtering of the API responses.\n
Ingestion points: Fetches repository state, pull request details, and workflow run information via gh api calls in scripts/delivery_wait.py.\n
Boundary markers: Observations are encapsulated in a structured JSON envelope before being presented to the agent.\n
Capability inventory: The skill performs network operations via the gh tool and manages local state files in the .agent/waits/ directory.\n
Sanitization: Raw API payloads are not stored; the skill extracts and validates specific fields like status strings and numeric IDs.

delivery-wait