The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses child_process modules (e.g., spawnSync, execFileSync) to run standard build and deployment tools including xcodebuild, xcrun altool, plutil, and git. These operations are fundamental to the skill's purpose of automating iOS releases and are performed using explicitly configured environment variables and paths.
[INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting untrusted data from git commit history and interpolating it into TestFlight "What to Test" metadata. While these strings are processed as text for human testers and transmitted to a trusted service (Apple), they represent a data flow where external input influences metadata output.
Ingestion points: templates/scripts/release/release-preflight.ts reads commit subjects via git log.
Boundary markers: The data is formatted as bullet points in the templates/scripts/release/what-to-test.ts module.
Capability inventory: The skill can write metadata to the App Store Connect API using the templates/scripts/asc/beta-notes.ts module.
Sanitization: Commit messages are summarized and length-limited (maximum 4000 characters) before being submitted to the external API.

ios-release-testflight