The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The workflow downloads the scc binary from a well-known service (GitHub). The download process includes SHA-256 checksum verification using sha256sum -c, ensuring the integrity of the external binary before it is executed in the CI environment.
[COMMAND_EXECUTION]: The workflow uses sudo to install the verified scc binary to a system path (/usr/local/bin/). While this involves elevated privileges, it is a standard installation procedure for transient CI runners and is limited to a previously verified binary.
[INDIRECT_PROMPT_INJECTION]: The skill processes the repository's source code, which could technically contain malicious instructions designed to manipulate the PR comment. However, the skill implements multiple mitigations: it wraps the tool output in markdown code blocks to prevent interpretation, and it strictly restricts execution to internal branches using an if condition on github.repository to prevent unauthorized comment manipulation from external forks.
[METADATA_POISONING]: The template references versions of official GitHub Actions (e.g., v7.0.1 and v9.0.0) that exceed currently available releases. However, the inclusion of full Git hashes for these actions ensures that specific code is pinned, preventing the execution of unintended or arbitrary versions.

code-complexity-stats-pr