The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests data from sources such as git commit messages, repository diffs, and pull request templates, which could be influenced by external contributors.
Ingestion points: The scripts/preflight.sh script reads git history and diffs, while scripts/validate-description.sh parses the PR_AGENTDESC.md file and .github/pull_request_template.md.
Boundary markers: Metadata is encapsulated in YAML frontmatter using --- delimiters, and the script logic separates the title from the body to maintain structure.
Capability inventory: The skill utilizes git push to update remote branches and gh pr create/edit to publish changes to GitHub.
Sanitization: scripts/validate-description.sh enforces rules to detect unclosed code fences, survivors of instructional comments, and unresolved placeholder markers like TODO or FIXME.
[COMMAND_EXECUTION]: The skill executes multiple local shell scripts to automate repository operations and GitHub CLI interactions.
scripts/create-pr.sh performs branch pushing and interacts with the GitHub API to create or update pull requests.
scripts/preflight.sh gathers repository metadata using git and gh tools to prepare the agent's context.
The skill relies on mise to run a lint-pr-description task, which is a project-specific development dependency.
[EXTERNAL_DOWNLOADS]: The skill interacts with GitHub's infrastructure to fetch and synchronize repository data.
scripts/preflight.sh performs a git fetch operation from the origin repository.
scripts/create-pr.sh uses gh to resolve labels, milestones, and issue references against the GitHub API.
[DYNAMIC_EXECUTION]: The scripts use dynamic command invocation for automation and timeout handling.
scripts/preflight.sh utilizes perl to execute git fetch with an alarm-based timeout mechanism.
scripts/create-pr.sh dynamically builds argument lists for gh pr create based on the parsed contents of the pull request draft.

codex-pr