The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The verify-live.sh script fetches the HTML of a deployed site and parses it using grep to identify asset links for verification. This represents a potential ingestion point for untrusted data from the live environment. * Ingestion points: Site HTML content fetched via curl in scripts/verify-live.sh. * Boundary markers: None explicitly present in the script for the fetched content. * Capability inventory: Network access (curl), Git operations (git push, git fetch), and command execution (node --check). * Sanitization: The script uses a specific regex to extract links but does not perform sanitization of the fetched content.
[COMMAND_EXECUTION]: The skill uses various shell scripts for measurement and verification. These scripts use standard tools like git, curl, awk, and find. The parameters to these scripts are either static project paths or user-provided URLs for deployment verification. Files: scripts/commit-size.sh, scripts/push-main.sh, scripts/upload-size.sh, and scripts/verify-live.sh.

workflow-ship-change