The Agent Skills Directory

Command Execution: The skill utilizes pnpm to run local repository scripts, such as generate-changelog-markdown-files and generate-component-changelog-entries. These are standard tools used to automate documentation updates within a development environment.
Indirect Prompt Injection Surface: The skill processes external content from files like packages/components/CHANGELOG.md and instruction sets in .bob/rules/ (Ingestion points). The skill lacks specific delimiters or boundary markers for this data (Boundary markers). The agent is granted the capability to execute shell commands via pnpm (Capability inventory). No explicit sanitization or filtering of the changelog content is mentioned (Sanitization). While this represents a potential surface for indirect prompt injection, the skill includes a manual checkpoint requiring user review before committing changes, which acts as an important safety control.
External References: The skill provides a template for linking to documentation hosted on Vercel (hds-website-X-Y-Z.vercel.app). Vercel is a well-known platform for hosting web documentation, and this reference aligns with the skill's stated purpose of updating documentation links.

add-release-notes