The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository via Git diffs, which could contain malicious instructions designed to influence the agent's behavior. • Ingestion points: The agent reads output from git status and git diff as defined in SKILL.md. • Boundary markers: Absent; the skill does not provide delimiters or specific instructions to treat diff content as non-executable data. • Capability inventory: The skill invokes git status and git diff commands to inspect the file system, as specified in SKILL.md. • Sanitization: Absent; no filtering or escaping of the repository content is performed before processing.
[COMMAND_EXECUTION]: The skill relies on system-level commands to perform its primary function. • Evidence: Instructions in SKILL.md direct the agent to use git status --short, git diff --staged --stat, and git diff --staged -- .

commit-message