The Agent Skills Directory

[COMMAND_EXECUTION]: The skill performs standard version control operations using Git commands.
Evidence: Step 1 uses git status --short and git diff --cached --check to inspect changes.
Evidence: Step 3 executes git push or git push -u origin HEAD to sync changes with the remote repository.
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it processes untrusted data from the filesystem (filenames and diffs).
Ingestion points: The skill reads output from git status and git diff in SKILL.md.
Boundary markers: None present to delimit filesystem data from instructions.
Capability inventory: The skill can execute git commit and git push (SKILL.md).
Sanitization: No sanitization or validation is performed on the ingested Git data. However, the risk is negligible as the skill is designed for developer workflows where this data is expected.

commit-and-push