The Agent Skills Directory

[OBFUSCATION]: The file scripts/vendor/js-yaml.min.cjs contains minified JavaScript code. While this is a standard third-party library (js-yaml) used for identifying workflow structures, minification obscures the underlying logic and is a form of code obfuscation.
[DYNAMIC_EXECUTION]: The script scripts/validate-workflow-snippets.sh uses a Bash heredoc to dynamically pass JavaScript source code to node for execution. This code further uses require() to dynamically load the bundled js-yaml module from a path provided as a command-line argument.
[COMMAND_EXECUTION]: The skill includes a release script (scripts/release.sh) and GitHub Actions workflows that execute shell commands to modify file permissions (chmod +x gradlew) and perform Git operations, including pushing tags and commits to remote repositories. These are high-capability operations necessary for the skill's stated purpose of release management.
[INDIRECT_PROMPT_INJECTION]: The publishing logic described in references/publishing-gradle.md parses CHANGELOG.md to extract release notes. This creates a surface where the agent processes external, project-specific data.
Ingestion points: references/publishing-gradle.md (via Gradle's file().readText())
Boundary markers: The logic uses explicit string headings (## [version]) to delimit content.
Capability inventory: The skill has the capability to write to the filesystem and push to remote Git repositories via scripts/release.sh.
Sanitization: The extraction logic performs basic string manipulation to isolate the relevant changelog section.

minecraft-ci-release