The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/analyze_changes.py executes local git commands (git status, git diff) using the subprocess.run function. The commands are passed as lists of arguments, which is a secure practice that prevents shell injection vulnerabilities. This behavior is consistent with the skill's stated purpose of analyzing git repositories.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data in the form of file paths and change statuses retrieved from the local filesystem via git commands. While a repository could contain maliciously named files intended to trick the agent, the risk is minimal as the script's logic is primarily focused on classification and formatting. * Ingestion points: The get_changes method in scripts/analyze_changes.py ingests output from git status and git diff. * Boundary markers: No delimiters or explicit warnings are used to separate ingested data from instructions. * Capability inventory: The skill's primary capability is executing local git commands. * Sanitization: No sanitization of file paths is performed before analysis.

commit-message