The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes various git commands (status, rev-parse, add, commit, stash, log) and a project-specific CLI tool rota (status, round, repo, backlog, milestone) to manage the state of the repository and session during a pause. These operations are restricted to the local project environment.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it reads data from external sources, specifically git log commit messages and file system paths. This data is used to populate 'Stage' and 'Next planned step' sections in handoff notes. While this could theoretically be used to influence the agent in the next session, the risk is inherent to tools that process repository history and the skill does not grant elevated privileges based on this data.
Ingestion points: Reads git log trailers and git status output in SKILL.md (Step 3 and Step 4).
Boundary markers: Handoff notes are written using a specific template (references/handoff-template.md) which provides structure, though explicit 'ignore' warnings for embedded content are not mentioned.
Capability inventory: Limited to local file system writes (handoff notes), git commits/stashes, and local status registry updates via the rota tool.
Sanitization: Not explicitly documented in the instructions, relying on the underlying CLI tools for argument handling.

rota-pause