The Agent Skills Directory

[COMMAND_EXECUTION]: The skill requires the execution of shell commands like git rev-parse and git log to identify commit ranges. Additionally, the subagent template in code-reviewer.md instructs the subagent to use git diff, git show, and git worktree to inspect the codebase history and state.
[PROMPT_INJECTION]: The skill processes untrusted code changes which creates a potential surface for indirect prompt injection attacks. 1. Ingestion points: The subagent ingests output from git diff containing raw code and developer comments in code-reviewer.md. 2. Boundary markers: The prompt template lacks explicit instructions or delimiters to warn the subagent against following instructions embedded within the reviewed code. 3. Capability inventory: The subagent is granted shell access for git operations and filesystem access. 4. Sanitization: The skill does not sanitize or filter the content of the git diffs before processing.

requesting-code-review