The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of local shell commands, primarily git for repository management and state tracking, and python3 to execute its bundled validation script scripts/check-run.py. These commands are integral to the stated developer workflow purpose.- [EXTERNAL_DOWNLOADS]: The skill references the gitleaks security tool and companion utility skills. The use of gitleaks is specifically mandated as a security best practice to prevent the accidental leakage of credentials during the workflow.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input such as bug reports and issue descriptions. It mitigates this risk by requiring human approval of generated plans and providing 'Clarify gates' where the agent verifies its understanding with the user before performing high-cost or risky actions.- [SAFE]: No malicious patterns or unauthorized exfiltration behaviors were found. The skill demonstrates good security posture by enforcing isolation between workflow metadata and application code, and by incorporating automated secret scanning.

workflow