The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute standard Git commands including git diff, git log, and git commit to perform its primary function.
[DATA_EXPOSURE]: The skill accesses local file contents through git diff and git log to generate commit messages, which is necessary for its stated purpose. It includes a protective instruction to avoid committing sensitive files like .env or credentials.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data (code diffs) which could theoretically contain malicious instructions.
Ingestion points: Untrusted data enters the context through git diff output as described in SKILL.md.
Boundary markers: None explicitly defined to separate diff content from instructions.
Capability inventory: The skill has the capability to execute shell commands (git commit) and read files.
Sanitization: No specific sanitization or escaping of the diff content is mentioned.

commit