The Agent Skills Directory

[COMMAND_EXECUTION]: The skill requires the Bash(cmd:*) tool to perform operations such as JSON parsing with jq, running workspace scripts with pnpm, and managing version control with git. These actions are central to the skill's stated purpose of automating version updates and are generally acceptable within its context.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from external files and user input to compute new version strings and update configuration files, creating a potential injection surface. 1. Ingestion points: The skill reads current version metadata from .claude-plugin/plugin.json (SKILL.md) and interprets versioning instructions from user queries. 2. Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the ingested version data. 3. Capability inventory: The skill has broad capabilities including file system modification (Write, Edit) and unrestricted Bash command execution. 4. Sanitization: There is no explicit evidence of sanitization or strict validation of the version strings before they are used in shell commands or written back to files.

version-bumper