The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes shell scripts to perform repository recovery and diagnostics. It executes standard Git commands and filesystem utilities like find, mkdir, mv, and printf to rebuild internal repository structures.
[INDIRECT_PROMPT_INJECTION]: The skill processes Git repository metadata and accepts external branch identifiers, creating a surface for potential path manipulation.
Ingestion points: scripts/recover-refs.sh (branch name argument) and repository reflog (.git/logs/HEAD).
Boundary markers: Absent. The script processes these inputs directly without protective delimiters or instructions to ignore embedded commands.
Capability inventory: scripts/recover-refs.sh performs directory creation (mkdir) and file writes (printf, mv); scripts/diagnose.sh executes directory searches (find) and network queries (git ls-remote).
Sanitization: Partial. scripts/recover-refs.sh validates the commit hash against a 40-character hexadecimal regular expression, but it does not sanitize the branch name argument for path traversal characters (e.g., ../), which could potentially allow writes outside the intended Git reference directory.
[EXTERNAL_DOWNLOADS]: The diagnostic script (scripts/diagnose.sh) connects to the remote repository defined as origin using git ls-remote to compare local and remote reference states, which is a standard network reference for Git operations.

zj-git-bypass-safe-delete