The Agent Skills Directory

[COMMAND_EXECUTION]: The skill constructs and executes shell commands using the gh issue create tool. The arguments for this command, specifically the issue title and body, are directly derived from the content of processed PRD and SPEC files. This represents a command injection risk if the source files contain shell metacharacters that are not properly escaped by the agent.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from project documentation files to generate implementation tickets, which are then used in shell commands and file creation operations.
Ingestion points: PRD and SPEC files located in the tasks/ directory or at user-specified paths.
Boundary markers: The instructions do not define delimiters or specific "ignore embedded instructions" warnings for the content read from these files.
Capability inventory: The skill has the ability to execute shell commands (gh issue create, mkdir -p) and write to the local file system.
Sanitization: There are no explicit instructions for sanitizing or validating the content extracted from the files before it is interpolated into commands or markdown files.

to-issues