The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/repo_eval.py uses the subprocess.run function to execute the gh (GitHub) CLI. The command is invoked with a fixed list of arguments and does not utilize the shell=True parameter, which effectively prevents command injection vulnerabilities from untrusted user input.
[EXTERNAL_DOWNLOADS]: The skill performs HTTP GET requests to api.ossinsight.io to retrieve repository history. This is a well-known public API for open-source metrics. The downloaded content is parsed as JSON for data analysis, and no executable code is retrieved or run from this source.
[DATA_EXFILTRATION]: No unauthorized data exposure or exfiltration was detected. The skill uses the user's local authentication context for the GitHub CLI to access repository metadata, which is consistent with its stated purpose of evaluating repository health.

repo-eval