The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes various shell commands (git, gh, sed, wc) to automate repository management. This is the intended primary purpose of the skill.
[PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection (Category 8) because it retrieves data from the local repository to construct Pull Request titles and descriptions.
Ingestion points: Data is ingested from the repository via git diff and git log commands (documented in SKILL.md).
Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded instructions within the ingested git data.
Capability inventory: The skill has the capability to execute shell commands (git, gh) and delegate tasks to the commit-it skill.
Sanitization: There is no explicit sanitization or escaping of the commit messages or diff content before they are interpolated into the gh pr create command.

ship