The Agent Skills Directory

[COMMAND_EXECUTION]: The skill generates and recommends the execution of various Git CLI commands to inspect logs and perform commit reverts.
[COMMAND_EXECUTION]: An indirect command injection surface is present where user-provided identifiers, such as track IDs and task numbers, are concatenated directly into git log shell command templates. While this is a common pattern for CLI-interfacing skills and the risk is mitigated by the explicit confirmation step, it represents an ingestion point for unvalidated data. 1. Ingestion points: User-supplied track, phase, and task identifiers. 2. Boundary markers: None present in the command string templates. 3. Capability inventory: Access to local Git operations and file system modifications (updates to plan.md and tracks.md). 4. Sanitization: No explicit input validation or escaping logic is described in the skill instructions.

conductor-revert