The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes data from the local repository environment, which constitutes untrusted input that could contain malicious instructions.
Ingestion points: The skill reads the output of git status --porcelain and the content of modified files during the testing phase (SKILL.md).
Boundary markers: Absent. There are no explicit instructions to the agent to disregard content found within the files or command outputs.
Capability inventory: The agent is instructed to execute git commands and run arbitrary test suites based on modified content (SKILL.md).
Sanitization: Absent. The skill does not perform validation or sanitization of the file contents or command outputs before processing them.
[DYNAMIC_EXECUTION]: The instruction to run tests related to modified content requires the agent to execute code or scripts present in the repository, which is a form of dynamic execution of local content.
[COMMAND_EXECUTION]: The skill uses local shell commands, specifically git status --porcelain and git commit, to perform its intended functions.

git-commit