The Agent Skills Directory

Command Execution: The skill utilizes standard development tools such as pnpm, jest, and python to build the project and execute test suites. These operations are intended for use within the official project repository during development and triage workflows.
Indirect Prompt Injection Surface: The skill is designed to ingest and process data from external GitHub issues, which represents a potential attack surface. However, the skill provides explicit defensive instructions to mitigate this, such as treating issue content as untrusted evidence and cautioning the agent against following embedded requests to execute commands or access secrets.
Dynamic Execution: The workflow involves creating and running minimal Python reproduction scripts to verify reported bugs. The skill includes safety guidelines for this process, mandating that repros be inspected and executed within isolated temporary workspaces to prevent unintended side effects.

pyright-issue-analysis