The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses shell commands (git diff, git log, git status) to extract project change data. This is essential for its primary function and is limited to standard git information gathering.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from git logs and conversation history without explicit sanitization or boundary markers. Ingestion points: Conversation history and output from git commands in SKILL.md. Boundary markers: Absent; the skill does not define delimiters to isolate external data from its generation logic. Capability inventory: File-write operations to local project and task tracking files and execution of git subprocesses. Sanitization: Absent; the skill does not specify escaping or validation for the content retrieved from git or conversation logs.- [SAFE]: The skill includes an explicit instruction to exclude sensitive information such as API keys and passwords from the generated reports, reducing the risk of accidental credential exposure in logs.

session-report