The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local repository scripts including ./updateDigests.sh, ./generatePipelineRuns.sh, and ./generatePipelineRunsForPlugins.sh to automate Tekton configuration updates. These operations are scoped to the local workspace and emphasize safety flags such as --no-push and --no-commit.\n- [EXTERNAL_DOWNLOADS]: Migration documentation, changelogs, and migration scripts are fetched from project-official GitHub repositories under the konflux-ci organization (e.g., build-pipeline-tasks, konflux-operator-tasks, tekton-tools). These are recognized project sources used to maintain pipeline compliance with upstream changes.\n- [PROMPT_INJECTION]: The skill is designed to follow 'user actions' documented in externally fetched MIGRATION.md files, which constitutes an indirect prompt injection surface. Evidence chain: (1) Ingestion points: MIGRATION.md files from GitHub; (2) Boundary markers: none present; (3) Capability inventory: shell script execution, YAML regeneration, and gh CLI usage in SKILL.md; (4) Sanitization: none present. The severity is assessed as safe given the trusted nature of the project-affiliated sources and the explicit requirement for human review of all changes.

konflux-tekton-updates