The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends installing the Bitbucket CLI (bkt) from a community Homebrew tap (avivsinai/tap/bitbucket-cli). While this is a common community tool, it is an external dependency not hosted by a primary trusted organization.
[COMMAND_EXECUTION]: The skill instructions and the Python script in scripts/pr_queue.py execute the bkt CLI tool using subprocess calls to interact with Bitbucket repository data and perform operations like listing, creating, and merging pull requests.
[INDIRECT_PROMPT_INJECTION]: The skill ingests pull request data (titles, descriptions) from external Bitbucket repositories, creating a surface for indirect prompt injection attacks.
Ingestion points: scripts/pr_queue.py fetches pull request metadata via bkt pr list --json.
Boundary markers: No specific boundary markers or delimiters are implemented in the helper script to isolate external data from instructions.
Capability inventory: The skill possesses write capabilities through the bkt tool, including creating, merging, and declining pull requests.
Sanitization: Pull request titles are truncated to 100 characters in the list_open_prs function, but no further sanitization or instruction filtering is performed.
[DYNAMIC_EXECUTION]: The test script scripts/test_pr_queue.py uses importlib.util to dynamically load the pr_queue.py module for unit testing. This is a standard Python pattern but involves dynamic code loading at runtime.

synthesis-bitbucket