The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill invokes npx -y pocketto-pi, which downloads the latest version of the pocketto-pi package from the NPM registry. This represents a dependency on an external, unversioned resource.
[COMMAND_EXECUTION]: The skill executes various local and system commands, including git, gh, and node. It performs operations such as branch resolution, file staging (git add -f), commits, and Pull Request creation via the GitHub CLI.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files to construct pull request metadata and bodies.
Ingestion points: Data is read from <plan_dir>/log.json, <phase_file>, and the <spec_dir> directory.
Boundary markers: The instructions do not specify any delimiters or warnings to prevent the agent from following instructions potentially embedded within these project files.
Capability inventory: The skill has the capability to write to the local filesystem (git commit), modify project metadata (pocketto-pi meta set), and create external records on GitHub (gh pr create).
Sanitization: There is no evidence of sanitization or validation performed on the ingested file content before it is passed to the format pr utility.
[DYNAMIC_EXECUTION]: The skill executes JavaScript files using node from paths that vary depending on whether the project is a local checkout or an installed NPM dependency (e.g., node enterprise/cli.js or node node_modules/pocketto-pi/enterprise/cli.js).

create-pr