The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes local PowerShell and Bash scripts to interact with the system's git binary. These scripts are used to programmatically identify the repository root, current branch name, and submodule configurations, which is necessary for the skill's primary function of establishing project context.
[SAFE]: The skill implements robust input validation by checking environment-derived data, such as Git branch names, against strict regular expression patterns (e.g., ^(\d{1,3})-([a-z0-9-]+)$). This validation prevents potential path injection or directory traversal attacks that could arise from malformed Git metadata.
[SAFE]: Analysis of the included scripts (spec-common.ps1 and spec-common.sh) confirms that they do not perform any network requests, credential harvesting, or privilege escalation. All script activities are constrained to reading local configuration files like .gitmodules and .aidlc/config.yaml within the project scope.

spec-context