The Agent Skills Directory

[SAFE]: The skill provides comprehensive documentation and automation scripts for interacting with GitHub's attachment and markdown rendering systems. All external resources and endpoints referenced belong to official GitHub domains or the author's official repository.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill implements secure practices for handling GitHub authentication tokens, such as using curl --config - to pass sensitive headers via standard input rather than command-line arguments, which prevents token exposure in process monitoring tools. It also includes explicit warnings for the agent to verify that artifacts do not contain secrets before uploading them to GitHub.
[COMMAND_EXECUTION]: All provided shell commands utilize the official GitHub CLI (gh) and standard utilities like curl and grep for legitimate platform operations. The commands are scoped to repository management and do not exhibit suspicious patterns.
[DYNAMIC_EXECUTION]: The skill includes a JavaScript snippet intended for browser automation to handle non-media file uploads. The code correctly handles binary data conversion and follows the expected browser-based upload flow for the GitHub interface without incorporating external or untrusted logic.

vp-github