The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of the bash tool to execute CLI commands such as diffity, gh, git, and open. These commands are used to manage tour sessions, retrieve repository metadata, and open the final tour in a local browser.
[EXTERNAL_DOWNLOADS]: The skill suggests that the user install the diffity CLI tool globally using npm install -g diffity if it is not already present in the environment.
[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from external sources.
Ingestion points: The agent is instructed to read and process content from GitHub PR bodies (gh pr view) and commit messages (git log).
Boundary markers: The instructions do not define any boundary markers or special delimiters to separate the external data from the agent's core instructions.
Capability inventory: The agent has the capability to execute shell commands (via the bash tool) and interact with the local filesystem to create and manage tours.
Sanitization: There are no instructions to sanitize or filter the content retrieved from PRs or commit logs before quoting or paraphrasing it into the tour narrative.

diffity-tour