The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/scan.sh script executes several shell commands including git clone, git fetch, git tag, and jq to manage repository state and configuration parsing.
[EXTERNAL_DOWNLOADS]: The skill performs clones and fetches from official OpenTelemetry GitHub repositories (github.com/open-telemetry/*). These are well-known, trusted organizations in the observability space.
[COMMAND_EXECUTION]: The SKILL.md instructions direct the agent to use git worktree add and mktemp to manage version checkouts for analysis.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external repositories for analysis. However, it uses clear boundary markers and specific formatting instructions for output, and it does not have high-privilege capabilities (like network exfiltration of local credentials) that would make it a high-risk target for injection from the source code it scans.

otel-component-telemetry