The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses local shell commands such as git, gh, glab, and make to perform development tasks like running tests, creating pull requests, and cleaning up branches. These operations are core to the skill's stated purpose and are performed within the user's local repository context.
[INDIRECT_PROMPT_INJECTION]: The skill processes local git diffs and potentially external ticket data during pull request creation. This represents a typical attack surface for indirect instructions; however, the skill mitigates this by instructing the agent to perform manual diff reviews and explicitly search for sensitive data before integration.
[DATA_EXPOSURE]: The skill promotes secure development by providing specific instructions to grep the git diff for sensitive patterns (passwords, tokens, API keys) before pushing code to remote repositories.
[EXTERNAL_DOWNLOADS]: The skill references standard APIs for well-known services (e.g., Bitbucket API) for pull request creation, which is a common and expected functionality for development tools.

finishing-branch