The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The installation script scripts/install-gh.sh performs several operations requiring root-level privileges:
Modifies system directories: mkdir -p -m 755 /etc/apt/keyrings and /etc/apt/sources.list.d.
Writes to system configuration files: Uses tee to write the GitHub CLI keyring to /etc/apt/keyrings/githubcli-archive-keyring.gpg and add a new repository source to /etc/apt/sources.list.d/github-cli.list.
Executes system package management: Runs apt update and apt install gh -y, which modifies the system's installed software base.
[EXTERNAL_DOWNLOADS]: The skill downloads the official GitHub CLI archive keyring from a remote server.
Evidence: wget -nv -O"$out" https://cli.github.com/packages/githubcli-archive-keyring.gpg in scripts/install-gh.sh.
Note: This is an official download from a well-known service used for the skill's primary purpose.
[INDIRECT_PROMPT_INJECTION]: The skill sets up an environment for the agent to execute GitHub CLI commands, creating an attack surface for processing untrusted data.
Ingestion points: Environment variables (GH_TOKEN, GITHUB_TOKEN) and CLI command arguments.
Boundary markers: Absent.
Capability inventory: bash (installation), apt (package management), and gh (GitHub operations).
Sanitization: No sanitization of inputs or commands is provided in the skill scripts.

githubbing