The Agent Skills Directory

[DYNAMIC_CONTEXT_INJECTION]: The skill uses the !command syntax in SKILL.md to retrieve real-time data from the local environment, including git status, git diff, and git branch. These commands are benign and standard for a version control utility, providing the agent with the necessary context to generate accurate commit messages.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository's worktree through Git diff commands. This exposes a vulnerability surface where malicious strings inside code changes could influence the agent's behavior during commit message generation. However, the skill's capabilities are limited to Git operations and do not include high-risk actions like network exfiltration.
Ingestion points: Git diff output loaded via dynamic context markers in SKILL.md.
Boundary markers: Absent; the skill does not explicitly instruct the agent to ignore instructions embedded within the diff content.
Capability inventory: git add, git commit, git status, and git log commands.
Sanitization: None; the raw diff content is processed directly to generate commit summaries.
[COMMAND_EXECUTION]: The skill instructs the agent to execute Git commands (add, commit) to manage changes. These operations are essential to the skill's function and are constrained to standard developer workflows without escalation or unauthorized access.

commit-with-context