The Agent Skills Directory

[SAFE]: All TypeScript scripts run via bun follow secure coding practices by using argument arrays in execFileSync instead of shell strings. This prevents command injection vulnerabilities when interacting with system tools like git, az, and gh.
[DATA_EXPOSURE]: The scripts/ship-open.ts utility accesses local browser Local State files to find profile directories mapped to user emails. This is a transparently documented feature used to ensure pull requests are opened in the correct browser account (e.g., work vs. personal). The data is processed locally and is not exfiltrated.
[CREDENTIALS_UNSAFE]: The skill retrieves short-lived OAuth and access tokens using the az and gh CLI tools to provide an authentication fallback when standard git credentials are missing. These tokens are handled in memory and passed via HTTP headers to official Azure DevOps and GitHub API endpoints.
[COMMAND_EXECUTION]: The skill performs expected git operations (commit, push, tag) and platform interactions (PR creation, work item linking) that are core to its stated purpose. It correctly identifies the target platform based on remote URLs.
[INDIRECT_PROMPT_INJECTION]: The skill has a low attack surface for indirect injection as it ingests data from local git state and user-supplied titles. It incorporates a preflight check (ship-preflight.ts) to ensure the working tree scope is clean before committing.

ship