The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local git and gh (GitHub CLI) commands to analyze repository diffs and update PR descriptions. These commands are executed via Node.js execFileSync with array-based arguments, which prevents shell command injection. The tool's access is limited to the local repository and the specific PR being processed.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data, creating a potential injection surface.
Ingestion points: Fetches PR body text using gh pr view in scripts/upsert-recap-block.mjs.
Boundary markers: Uses HTML comments  and  to delimit its output.
Capability inventory: gh pr edit for PR updates, git diff for repository inspection, and Node.js script execution.
Sanitization: The mergeRecapBody function performs string replacement only within the defined marker boundaries, protecting the surrounding PR content.

visual-recap