The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The install-git-cliff.sh template script downloads the git-cliff release binary from GitHub. It incorporates security best practices by validating the download against a pinned SHA256 checksum before installation.
[COMMAND_EXECUTION]: The testflight.yml workflow uses eval to import key-value configuration strings generated by the release-track.sh utility script. This facilitates environment variable sharing but introduces a dependency on the integrity of the project manifest files being parsed.
[PRIVILEGE_ESCALATION]: Setup scripts utilize sudo install within the GitHub Actions runner environment to deploy release tools to system-wide binary paths such as /usr/local/bin/.
[INDIRECT_PROMPT_INJECTION]: The automation generates changelogs and TestFlight release notes by aggregating pull request titles and commit messages. As these inputs are later processed by the agent during release management, they represent a potential surface for indirect prompt injection if unvetted content is merged into the repository.
[DYNAMIC_EXECUTION]: The release-track.sh script dynamically updates versioning information within project manifest files (including package.json, .xcconfig, and Xcode .xcodeproj files) using node and perl as part of the intended release cycle logic.

xcode-vercel-release-tracks