The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses pnpm install to manage Node.js dependencies and npx skills add to install sibling skills from the author's GitHub repository. These are standard practices for this skill's ecosystem and trace back to the vendor's infrastructure.
[COMMAND_EXECUTION]: The skill relies on the git and gh (GitHub CLI) binaries to perform its core functions. It executes bundled Node.js scripts using node. Technical review shows the use of execFileSync and deliberate shell escaping (using single quotes and environment variables for titles) to prevent command injection from user-controlled content like commit messages.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from Git commit messages, GitHub PR bodies, and Linear issues to derive PR titles, changelog entries, and summaries.
Ingestion points: Reads from git log (commit messages), gh pr view (PR body), and mcp__linear-server (Linear issues).
Boundary markers: The skill uses specific record and unit separators ( and ) for git log parsing to ensure data integrity. PR bodies are managed via temp files using the --body-file flag to avoid shell interpolation.
Capability inventory: Uses git, gh, pnpm, node, npx for automation, and Write/Edit for file management.
Sanitization: Implements regex-based sanitization for branch slugs (deriveSlug) and uses execFileSync to avoid shell parsing of variable content.

send-it