The Agent Skills Directory

[Secure Development Guidelines]: The skill defines clear boundaries for processing external content, specifically stating that fetched release notes must not define executable behavior and that unknown identifiers must result in a "fail closed" state.
[User Authorization Controls]: The instructions explicitly forbid the automatic execution of sensitive actions, such as submitting chat input, enabling settings, or installing extensions, ensuring that these remain under direct user control.
[Codebase-Specific Context]: The skill references internal source paths and standard development scripts (e.g., npm run build-fast) which are consistent with its intended use for maintaining a specific software project.
[Input Validation Practices]: It mandates the use of stable, namespaced identifiers and requires that commands retain their normal preconditions and permission checks, serving as a defensive measure against unauthorized access.

feature-tryouts