The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the GitHacker package via pip and provides an alternative installation method using the f8x tool.
Evidence: pip install GitHacker and f8x -install githacker in SKILL.md.
[COMMAND_EXECUTION]: The skill executes external binaries (githacker, docker) and standard utilities (git, grep) to interact with the file system and network.
Evidence: Commands such as githacker --url, docker run, and git log are used to perform the skill's primary function of source code recovery and auditing.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from remote .git directories, which creates an attack surface for malicious repository content such as git hooks.
Ingestion points: Remote .git directories accessed via URLs provided to the githacker command in SKILL.md.
Boundary markers: Absent in the command execution flow, although the instructions include a warning for the user to use Docker for isolation.
Capability inventory: Includes network downloads (githacker), local file writing, and repository interaction (git commands).
Sanitization: The skill recommends running the tool within a Docker container to mitigate the risk of local command execution from malicious git hooks.

githacker-git-leak