The Agent Skills Directory

[COMMAND_EXECUTION]: The decisions.py script interacts with the local Git repository using subprocess.run to perform administrative tasks like collision detection and history tracking. These interactions use structured argument lists (e.g., git rev-parse, git ls-tree), which prevents shell injection vulnerabilities. The script specifically avoids fetching from the network to ensure offline safety.
[PERSISTENCE]: The install command configures a Git pre-commit hook (.git/hooks/pre-commit) to automate record validation. This is a standard and documented feature that ensures repository consistency by running a check script before commits are finalized.
[PRIVILEGE_ESCALATION]: The tool sets executable permissions on the Git hook using chmod. This is a standard operation required for Git hooks to function correctly within the local development lifecycle and does not involve escalating system-level privileges.
[DATA_EXPOSURE]: The tool operates exclusively on local markdown files within the project directory and Git metadata to manage the decision registry. No network exfiltration or access to sensitive credentials (such as SSH keys or cloud tokens) was detected.

decision-records