The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests data from local CLI directories to generate pull request descriptions for the public library, which presents a surface for indirect instructions to influence the agent's PR generation.
Ingestion points: Metadata such as description and novel_features are read from the .printing-press.json manifest, and prose is extracted from the first few paragraphs of the CLI's README.md.
Boundary markers: The PR description template uses Markdown headers and fenced code blocks to separate user-provided content from the structural elements of the pull request.
Capability inventory: The skill utilizes git and the GitHub CLI (gh) to perform network operations, specifically pushing code to remote branches and creating/editing pull requests.
Sanitization: The skill implements comprehensive sanitization, including a mandatory vendor-prefix secret scan (blocking for tokens like sk_live_*) and a multi-tiered PII scrubbing process to redact emails and generic bearer tokens before publication.
[EXTERNAL_DOWNLOADS]: The skill references external tools for installation and quality gating.
It directs the user to install the cli-printing-press binary from the vendor's repository at github.com/mvanhorn/cli-printing-press.
It utilizes govulncheck from the official golang.org registry to verify the security of the CLI being published.
[COMMAND_EXECUTION]: The skill makes extensive use of Bash to manage the publishing workflow.
It performs repository management (cloning, sparse checkouts, forking, and branch management) and filesystem operations (copying staged packages and renaming files).
[DYNAMIC_EXECUTION]: The skill dynamically resolves the path to its core binary to maintain environment consistency.
During the setup phase, the script identifies the absolute path to cli-printing-press and enforces its use in all subsequent steps to prevent path hijacking or shadowing by stale global binaries.

printing-press-publish