The Agent Skills Directory

[COMMAND_EXECUTION]: Executes shell commands for git management, dependency installation, and project verification (tests, build, lint). It mitigates command injection by validating the ISSUE_ID against a strict regex (^[A-Z]+-[0-9]+$) and slugifying branch descriptions before they are used in shell contexts.
[PROMPT_INJECTION]: Accesses external data through docs/plans/ and docs/designs/ files, creating a surface for indirect prompt injection. The skill mitigates this by providing explicit instructions to the agent to treat the content as data only and ignore instructions, as well as performing validation on the issue ID before file access.
[EXTERNAL_DOWNLOADS]: Initiates package installation via standard tools (npm, pip, poetry, bundle) from well-known registries. While these are trusted sources, this operation involves the retrieval of external code based on the project's configuration files.

git-worktrees