The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill attempts to extract a GitHub authentication token by reading and parsing the ~/.git-credentials file if the gh CLI is not configured. This constitutes unauthorized access to sensitive credential storage.
[COMMAND_EXECUTION]: The skill executes multiple shell commands including git, gh, curl, grep, sed, cut, and xargs to interact with local repositories and the GitHub API.
[PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it fetches and processes untrusted data from GitHub issue titles, bodies, and comments. 1. Ingestion points: GitHub API responses retrieved in SKILL.md via curl and gh issue list/view commands. 2. Boundary markers: No delimiters or instructions are used to distinguish between the agent's instructions and the content of the issues being processed. 3. Capability inventory: The skill can execute shell commands and perform network requests to the GitHub API across all its management functions. 4. Sanitization: There is no sanitization or filtering of the content fetched from GitHub before it is processed by the agent or printed to the console.

github-issues