The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses standard developer tools including git and gh (GitHub CLI) to manage repository tags and releases. These operations are performed within the context of the repository's origin and default branch.
[DATA_EXFİLTRATION]: While the skill interacts with GitHub, all network operations (git push, gh release create, gh api) are targeted at the official GitHub service and are restricted to the current repository's owner and name. The skill explicitly instructs the agent to use the --repo flag to prevent command redirection to unintended repositories.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as remote Git tags and GitHub API responses to determine versioning history. However, it applies structured logic (semantic versioning rules) to this data before performing any actions, minimizing the risk of malicious input influencing the agent's behavior. The severity is low as it follows standard DevOps automation patterns.
[SAFE]: The skill includes best practices for release management, such as verifying CI status (gh api ... /check-runs) before pushing a new tag and ensuring the local state matches the remote state (git ls-remote).

tag-release