The Agent Skills Directory

[COMMAND_EXECUTION]: The skill directs the agent to execute shell commands git status and git log to verify the state of working repositories. These commands are used solely for reporting information to the user and are standard for developer workflows.
[PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it processes output from external git commands. 1. Ingestion points: The outputs of git status and git log are read into the agent's context. 2. Boundary markers: Absent; there are no explicit instructions to the agent to treat the command output as untrusted data or ignore embedded instructions. 3. Capability inventory: The agent is authorized to execute shell commands (git). 4. Sanitization: Absent; the skill does not filter or sanitize the command output before processing.

done