The Agent Skills Directory

[COMMAND_EXECUTION]: The bundled script scripts/bump_release.py automates the release process by executing git and uv commands via subprocess.run. These calls use a list-based argument structure and do not invoke a shell, effectively preventing command injection risks.
[COMMAND_EXECUTION]: The SKILL.md file contains instructions suggesting that the user should rerun the release command with escalated permissions if environment sandboxing restricts access to the uv cache. This is documented as a troubleshooting step for environment-specific tool constraints and does not represent an inherent security flaw in the script's logic.

uv-version-bump