The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from Git and GitHub to automate operations.
Ingestion points: Branch names, issue slugs derived from issue titles via gh issue view, and pull request metadata.
Boundary markers: Absent. The instructions rely on the agent to follow naming conventions but do not define strict delimiters to prevent the agent from obeying instructions embedded in this data.
Capability inventory: Extensive use of the Bash tool for running Git and GitHub CLI commands across all skill files.
Sanitization: Partial. The skill provides logic to replace slashes with dashes in branch names, but it does not employ robust shell-escaping for all variables interpolated into commands.
[EXTERNAL_DOWNLOADS]: The skill recommends installing the gh-stack extension from the official GitHub repository (github/gh-stack). This is an expected operation for the skill's functionality and involves a well-known service.
[COMMAND_EXECUTION]: Heavy use of shell commands through the Bash tool to interact with Git and the GitHub CLI. This includes creating and removing worktrees, rebasing, and managing remote branches based on local and remote state.

gitkit