The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes shell commands using the gh CLI and git. It performs operations such as git status, git branch, and git diff to gather context. It also executes gh pr create using a dynamically generated title and a body saved to a temporary file. While these are standard developer tools, the execution of shell commands with generated arguments presents a potential injection surface.
[INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests and processes untrusted data to generate its outputs.
Ingestion points: The skill reads data from git diff output and user-supplied reports, issues, or related PRs to gather context for the PR description.
Boundary markers: The instructions do not specify any delimiters or safety markers to prevent the agent from following instructions that might be hidden inside the code diffs or issue reports being analyzed.
Capability inventory: The skill has the capability to execute shell commands (gh, git) and write to temporary files.
Sanitization: There is no evidence of sanitization, filtering, or escaping of the external data before it is interpolated into the final PR body or used as a command argument.

make-pr