The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes several TypeScript scripts to execute local system commands such as git, az, gh, cmd.exe, and open. These executions are handled using execFileSync and spawn with argument arrays, which prevents shell command injection vulnerabilities and ensures safe process handling.
[DATA_EXFILTRATION]: The script scripts/ship-open.ts accesses local browser configuration files, specifically the Local State file for Chrome and Edge browser profiles. It parses this file to extract profile names and associated email addresses, enabling the agent to prompt the user to choose a specific browser profile for viewing Pull Requests. This access is limited to reading the account mapping for local browser launching and does not involve external transmission of the data.
[EXTERNAL_DOWNLOADS]: The skill depends on external libraries @octokit/rest and azure-devops-node-api downloaded from the official NPM registry. These are standard SDKs provided by GitHub and Microsoft for interacting with their respective platforms.

ship