The Agent Skills Directory

[COMMAND_EXECUTION]: Uses the official GitHub CLI to manage repositories, pull requests, and issues.
[EXTERNAL_DOWNLOADS]: Installation instructions reference the GitHub CLI, a well-known service, through trusted package managers.
[PROMPT_INJECTION]: The skill ingests untrusted data from GitHub, creating a surface for indirect prompt injection.
Ingestion points: gh issue view and gh pr view commands in SKILL.md ingest external data.
Boundary markers: No delimiters or instructions are provided to the agent to treat fetched data as untrusted.
Capability inventory: The skill includes commands that can modify repository state (e.g., merging PRs, creating releases).
Sanitization: Fetched data is interpolated into the agent context without sanitization.

github