The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill clones external GitHub repositories and StackBlitz projects identified in bug reports and executes "pnpm install", "pnpm build", and "pnpm dev" within those directories. This involves running arbitrary code provided by untrusted external users (issue reporters).
[INDIRECT_PROMPT_INJECTION]: The triage process ingests external data from GitHub issue titles and bodies. Maliciously crafted bug reports could contain embedded instructions intended to override the agent's logic or influence the outcome of the triage steps.
Ingestion points: "issueTitle", "issueBody", and GitHub issue details fetched via "gh issue view".
Boundary markers: Absent. The skill processes the raw issue text to understand the bug.
Capability inventory: File system access, network requests (curl, gh, git), and command execution (pnpm, pkill, rm).
Sanitization: No specific sanitization or filtering is applied to the untrusted issue content before processing.
[EXTERNAL_DOWNLOADS]: Downloads project files and configuration from external URLs using "curl" for GitHub Gists and "npx stackblitz-clone" for StackBlitz reproductions.
[COMMAND_EXECUTION]: Performs management tasks on the local system, such as "pkill" to terminate background processes and "rm -rf" to clean up directories.

triage