The Agent Skills Directory

[COMMAND_EXECUTION]: The skill automates project setup by executing commands like git, gh, and bon through subprocess.run in its internal scripts (init_repo.py and validate_repo.py). These executions use list-based arguments rather than shell strings, which is a secure implementation that prevents command injection from user-provided inputs such as project names or descriptions.
[EXTERNAL_DOWNLOADS]: The skill utilizes the uv tool to manage environments and execute scripts. This process may involve downloading standard development dependencies (e.g., pytest) from official package registries like PyPI, which is expected behavior for Python development tooling.
[SAFE]: No malicious patterns were identified. The skill interacts with the GitHub API and remote repositories using the user's existing authenticated CLI environment to perform the explicit task of project scaffolding.

scaffold