The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/upload-github-attachment.sh executes the gh CLI and curl to interact with GitHub APIs and perform file uploads.
[DATA_EXFILTRATION]: The skill transmits local files to GitHub's user-attachment infrastructure using the user's GH_TOKEN or GITHUB_TOKEN. The script and instructions include explicit protections to prevent the leakage of these credentials in diagnostic output.
[EXTERNAL_DOWNLOADS]: The skill performs network requests to uploads.github.com and api.github.com as part of its core functionality to upload attachments and resolve repository information.
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it ingests local file paths for processing and upload.
Ingestion points: Local file paths provided as arguments to the upload-github-attachment.sh script in SKILL.md and README.md.
Boundary markers: None; the tool performs a direct binary upload of the target file to GitHub.
Capability inventory: File system read access, execution of system commands (gh, curl, file, sed), and network POST access to GitHub domains.
Sanitization: The script validates that the returned URL starts with https://github.com/user-attachments/ before outputting it. The skill instructions also direct the agent not to issue network requests to verify the uploaded assets, reducing the risk of processing malicious content.

upload-github-attachment