The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes various git commands and local bash scripts (preflight.sh, commit.sh, stamp-review.sh) to automate and verify the repository workflow.
[EXTERNAL_DOWNLOADS]: Fetches branch data from the repository's official origin remote during the preflight stage to determine rebase recommendations.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository environment, including git diffs and commit history.
Ingestion points: preflight.sh reads git log, git diff, and git ls-files.
Boundary markers: The instructions in SKILL.md specify using structured sections and logical grouping to handle changes.
Capability inventory: The skill can execute git commands and write to files (like COMMIT_AGENTMSG) within the repository.
Sanitization: The commit.sh wrapper performs hash verification of the commit message and tree to ensure no unauthorized changes were introduced during the process.
[DYNAMIC_EXECUTION]: The preflight.sh script uses perl to execute commands with a timeout (perl -e 'alarm shift; exec @ARGV'). While this involves dynamic execution, it is used for the specific, benign purpose of implementing a timeout mechanism for platform compatibility.

codex-commit