The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from external sources, such as pull request descriptions retrieved from Azure DevOps and entries within CHANGELOG.md. This information is interpolated into version files, git tags, and Azure Artifact package metadata.
Ingestion points: ReleaseCut.ts reads pull request descriptions from local markdown files and the Azure DevOps API; Changelog.ts parses CHANGELOG.md content.
Boundary markers: There are no explicit boundary markers or instructions to the agent to ignore embedded commands within the processed data.
Capability inventory: The skill can write to the local file system (bumpVersionFiles), perform remote git operations (gitPush), and publish packages to Azure Artifacts (az artifacts universal publish).
Sanitization: The tools utilize execFileSync with argument arrays, which prevents shell-based command injection during processing.
[EXTERNAL_DOWNLOADS]: The skill's walkthrough documentation recommends installing the Bun runtime and the uv package manager via shell-piped scripts from their official domains (https://bun.sh/install and https://astral.sh/uv/install.sh). These are recognized as well-known developer services.
[DYNAMIC_EXECUTION]: During the publishing workflow, ReleasePublish.ts conducts an installation test by creating a virtual environment and installing the recently built package. This process involves executing code from the project being released to verify its version via importlib.metadata.

ship-tag