The Agent Skills Directory

[COMMAND_EXECUTION]: Several bundled scripts (_common.py, loop_run.py, path_config.py) utilize subprocess.run and subprocess.Popen to perform Git operations and execute project-specific verification commands. These operations are essential for the framework's state management and are restricted to the local repository context.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data sourced from the repository's codebase and user dialogue. The risk is mitigated by the use of structured markdown templates and the scripts/discussion_records.py helper, which enforces a specific schema for recording dialogue and answers, providing clear boundaries between user input and assistant output.
[DYNAMIC_EXECUTION]: The scripts/path_config.py script uses importlib.import_module to load internal components of the GSD Path runtime. This is used exclusively for local module resolution within the project's own directory structure and does not facilitate the execution of arbitrary external code.

gsd-path-discuss