The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes standard version control commands using git and the GitHub CLI (gh). It also utilizes project-specific tooling via bun run. All command execution is scoped to the version control layer and is consistent with the skill's primary function.
[INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from the repository's history, branch names, and configuration files. This vulnerability surface is well-mitigated by the requirement to always propose generated content—such as branch names, commit sets, and PR bodies—to the user for explicit approval before any execution.
[CREDENTIALS_SAFE]: The skill instructions explicitly forbid the inclusion of secrets, credentials, or .env files in commits. It further mandates the use of explicit file paths for git add operations to prevent accidental staging of sensitive files.

git-flow-master