The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill includes instructions to fetch the official GitHub CLI signing key and repository configuration from cli.github.com during the installation process.
[COMMAND_EXECUTION]: The documentation provides standard shell commands for package installation using brew, apt (utilizing sudo), and winget, as well as the full suite of gh CLI commands for repository, secret, and account management.
[INDIRECT_PROMPT_INJECTION]: The skill documents commands that ingest untrusted content from external sources (such as GitHub issue bodies, pull request descriptions, and comments) into the agent's context, creating a potential attack surface if the agent acts on instructions embedded within that data.
Ingestion points: Commands like gh issue view, gh pr view, and gh gist view fetch user-generated content from GitHub (SKILL.md).
Boundary markers: None identified in the instructional text.
Capability inventory: The skill documents capabilities for repository deletion (gh repo delete), secret management (gh secret set), and workflow execution (gh workflow run).
Sanitization: None present; the skill functions as a static command reference.

gh-cli