The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill retrieves the title of a GitHub Pull Request using gh pr view and uses it to update the task title via set_thread_title. This provides a path for untrusted external content to enter the agent's operational context. 1. Ingestion points: PR title fetched via gh pr view in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: set_thread_title, bun i, bun run build. 4. Sanitization: None identified for the fetched title.
[COMMAND_EXECUTION]: The skill executes shell commands bun i and bun run build to manage dependencies and build the project. These are standard developer operations for the repository's stated purpose.
[EXTERNAL_DOWNLOADS]: The bun i command installs project dependencies from standard registries, which is an expected and routine behavior for setting up a JavaScript/TypeScript development environment.

checkout