The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (gh) to automate release management tasks. These include running workflows, listing runs, downloading artifacts, and managing releases on the steerlabs/opensteer repository. It also uses pnpm to execute project-specific scripts (desktop:public-release) for preparing and promoting release packages.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process and inspect data from external sources, specifically release artifacts and metadata files like release.json from the GitHub repository. While this represents an ingestion surface for untrusted data, the instructions mitigate risk by mandating rigorous verification steps.
Ingestion points: Artifacts downloaded via gh run download and gh release download, and content from release.json referenced in SKILL.md.
Boundary markers: The skill contains explicit instructions to "Verify the assets against that draft's release.json" and "Inspect the complete draft" before proceeding.
Capability inventory: Shell execution via gh CLI and pnpm for release dispatch and local packaging.
Sanitization: The skill relies on manual verification of SHA256 digests and source SHAs to ensure data integrity during the release process.

prepare-release