The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The bin/worktree script includes functionality to fetch GitHub issue titles and PR branch names via the gh CLI. While this represents an ingestion point for untrusted data, the script uses a slugify function to sanitize the input (reducing it to lowercase alphanumeric characters and hyphens) before using it in file system or git operations. This mitigation effectively prevents command or path injection.
[COMMAND_EXECUTION]: The skill manages development processes and git worktrees through shell scripts. These operations are essential to its function as a development tool and are restricted to standard project management tasks such as service orchestration and worktree lifecycle management.
[EXTERNAL_DOWNLOADS]: The installation instructions reference well-known development tools, including process-compose (a common process orchestrator) and outport (a port management tool maintained by the skill author). These dependencies are standard for the described workflow and are fetched from legitimate sources.

devstack