The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses git diff to analyze code changes. This is a standard development command necessary for the skill's primary purpose of reviewing Pull Requests.
[PROMPT_INJECTION]: The skill processes code changes which could contain untrusted input, creating a surface for indirect prompt injection. The risk is minimal as the skill's output is limited to reporting findings to the user and it does not possess high-privilege capabilities like network access.
[DATA_EXPOSURE]: The skill accesses the local codebase to perform its review. Notably, the checklist specifically includes a security check (G7) to ensure developers do not include real credentials or production URLs in their code.

pr-check-design