The Agent Skills Directory

[COMMAND_EXECUTION]: The skill performs shell commands using git, gh, pnpm, and curl. These are used for administrative tasks such as cloning the baseline repository, checking GitHub repository settings, and installing project dependencies.
[EXTERNAL_DOWNLOADS]: The skill is instructed to download baseline templates, workflows, and configuration files from the official patinaproject/skills repository on GitHub. This centralizes the source of truth to the vendor's own verified infrastructure.
[REMOTE_CODE_EXECUTION]: The skill executes pnpm install after updating repository configuration files like package.json and git hooks. While this executes code derived from a remote source, the risk is mitigated by the use of the vendor's trusted repository and the requirement for explicit user confirmation for all changes.
[DATA_EXFILTRATION]: The skill reads repository metadata and user identity information (name, email, and login) via the GitHub API and local git configuration. This data is used exclusively to populate repository documents with correct author information and to audit repository settings within the user's authenticated session.

scaffold-repository