The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The documentation refers to the installation of the '@withgraphite/graphite-cli' package from the official registry. This is the legitimate tool provided by the vendor for the described workflow and is not an unauthorized external source.
[CREDENTIALS_UNSAFE]: The 'scripts/graphite-detect.sh' script reads the local Graphite configuration file at '~/.config/graphite/user_config' to verify the presence of an authentication token. This local check is used to determine tool readiness and does not involve network transmission or exfiltration of the token.
[COMMAND_EXECUTION]: The skill uses shell scripts to perform environment checks and enforce version control standards. These scripts interact with 'git' and 'gt' tools to provide diagnostic feedback and maintain repository integrity.
[INDIRECT_PROMPT_INJECTION]: The 'scripts/graphite-block-hook.sh' script processes tool commands as input to identify potential workflow conflicts. Because the script acts as a validator that blocks execution when conflicts are found, it serves as a safety mechanism rather than an injection vector.

use-graphite