The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the official GitHub CLI tool (gh) to retrieve information about pull requests. The shell commands used (gh pr list, gh search prs, and gh repo view) are limited to read-only operations and do not include any flags that would modify repository state, create comments, or merge code.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, specifically Pull Request titles and descriptions. While this provides a surface for indirect prompt injection where an attacker could place instructions in a PR title, the skill mitigates this by functioning strictly as a viewer and including explicit instructions to the agent not to automatically execute follow-up commands.
[DATA_EXPOSURE]: The skill dynamically discovers the repository and user context using local environment queries (@me and gh repo view) rather than requiring hardcoded credentials or environment variables, following standard secure practices for CLI-based tooling.

prlist