The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes shell commands to manage the Git lifecycle and project dependencies.
Uses git commands for branching, worktree creation, removal, and pruning (e.g., git worktree add, git worktree remove).
Executes project-specific setup commands including npm install, pnpm install, cargo build, pip install, dotnet restore, and go mod download.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection via untrusted repository data.
Ingestion points: The skill reads local project manifest files (package.json, Cargo.toml, requirements.txt, etc.) to determine the environment setup strategy.
Boundary markers: No delimiters or "ignore instructions" warnings are used when processing these external configuration files.
Capability inventory: The skill has the capability to run arbitrary build scripts defined in those manifests via standard package manager commands.
Sanitization: There is no validation of the contents of these manifest files before they are used to trigger execution of installation or build tools.
[EXTERNAL_DOWNLOADS]: The skill uses established package managers to fetch external code during environment initialization.
Automatically downloads dependencies from well-known, trusted registries such as npmjs.org, PyPI, and Crates.io when manifest files are detected.

git-worktrees