The Agent Skills Directory

[COMMAND_EXECUTION]: The helper script executes the git and sqlite3 command-line tools using Open3.capture3. While these calls use argument arrays to prevent shell injection, they represent a mechanism for interacting with the host system's binaries.\n- [DYNAMIC_EXECUTION]: The Ruby script evaluates config/database.yml using ERB. In a development context, this allows for the execution of Ruby code embedded within the configuration file, which is a common but powerful capability in Rails environments.\n- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection due to its processing of untrusted project data.\n
Ingestion points: Reads and evaluates config/database.yml from the current working directory.\n
Boundary markers: The agent is instructed to announce the skill's activation, providing visibility into its execution.\n
Capability inventory: The skill possesses file read/write capabilities via FileUtils and subprocess execution via Open3.capture3 for git and sqlite3 operations.\n
Sanitization: The script uses YAML.safe_load to restrict allowed classes, though the preceding ERB evaluation step processes the file content as executable code.

using-sqlite-worktrees