The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a shell command (ls) to locate TRACKER.md configuration files within the project structure. This is a localized search for configuration discovery and does not involve dangerous arguments or privilege escalation.
[EXTERNAL_DOWNLOADS]: The documentation references an external GitHub repository (github.com/mattpocock/skills) for attribution and licensing purposes. This is a reference to a well-known developer and is used purely for documentation.
[PROMPT_INJECTION]: The skill ingests untrusted data from external sources, such as issue bodies, comments, and project specifications, to generate ticket content. While this creates a surface for indirect prompt injection, it is central to the skill's primary purpose of summarizing and breaking down tasks, and no evidence of exploitation was found.

to-tickets