The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes standard local commands (git and gh) to gather repository context and perform commits. These operations are restricted to the local workspace.
[DATA_EXFILTRATION]: While the skill reads repository metadata and file differences (git diff, git log) to generate commit messages, this data is used locally within the agent session. There is no evidence of unauthorized external data transmission.
[EXTERNAL_DOWNLOADS]: The skill utilizes the GitHub CLI (gh) to fetch the default branch name from the remote repository. This targets a well-known developer service and is a standard part of development workflows.
[CREDENTIALS_UNSAFE]: The instructions explicitly warn against staging sensitive files like .env or credentials, demonstrating a proactive security posture regarding secret management.

git-commit