The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of the gh (GitHub CLI) and git commands through Bun's shell API. These tools are used for workflow dispatch, pull request management, repository tagging, and fetching project metadata. While these are high-privilege operations, they are scoped to the Kilo-Org/kilocode repository and are required for the skill's stated purpose.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection.
Ingestion points: The skill reads external, potentially attacker-controlled data from GitHub PR bodies via gh pr view and git commit logs via git log as described in SKILL.md.
Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are used when providing this external content to the agent for changelog generation.
Capability inventory: The agent has the capability to commit changes to the repository via the GitHub API (update-changelog.ts), dispatch GitHub Action workflows (dispatch-prepare.ts), and merge pull requests (watch-publish.ts).
Sanitization: There is no evidence of sanitization or filtering of the ingested PR/commit text before it is processed by the agent.

release-jetbrains