The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes local shell commands including git, sed, grep, and wc to automate version control tasks. These operations are standard for repository management and are restricted to the local filesystem and git context.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data from git commit logs and file diffs, which constitutes a potential attack surface.
Ingestion points: Commit messages (from git log) and filenames (from git diff) are ingested and written to repository files.
Boundary markers: While the instructions do not use specific delimiters for the prompt itself, the shell commands are constructed using HEREDOC EOF delimiters to prevent data from being interpreted as commands.
Capability inventory: The skill possesses the ability to read and write files (Read, Edit tools) and execute git/shell commands (Bash tool).
Sanitization: The skill mitigates shell injection risks by wrapping variable content in HEREDOC blocks within git commit commands, ensuring commit messages are treated as data rather than executable shell input.

post-commit