The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches package metadata from the official Packagist repository (repo.packagist.org) to verify that newly pushed tags are correctly recognized by the PHP dependency manager.
[INDIRECT_PROMPT_INJECTION]: The skill processes content from local repository files, such as CHANGELOG.md and composer.json, to automate the creation of GitHub release notes and version verification.
Ingestion points: CHANGELOG.md and composer.json are read and parsed to extract release information.
Boundary markers: The instructions utilize regex for extraction but do not explicitly define boundary markers to separate untrusted file content from the agent's instructions.
Capability inventory: The skill uses git, gh (GitHub CLI), perl, and curl for repository management and network operations.
Sanitization: No specific sanitization process is described for the content extracted from the changelog before it is used in the gh release create command.

craft-plugin-release