The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses git diff --name-only HEAD~5 to identify modified files in the repository. This is a standard, read-only operation used for change detection in development workflows.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from changes.json and source code files to build a 'change manifest' for subagents. While the skill lacks explicit boundary markers or sanitization for this data interpolation, the risk is mitigated by the highly scoped instructions for subagents, which are restricted to editing test files and explicitly forbidden from modifying source code.
[DATA_EXPOSURE]: The skill reads project-specific files such as test-plan.md, backend-plan.md, and application source code. This data access is necessary for its stated purpose of verifying and updating tests and does not target sensitive user credentials or system-level configuration files.

verify-test