The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill attempts to dynamically install the diffity package globally via npm install -g diffity if it is not found on the host system. This dependency is unversioned and fetched from an untrusted public registry at runtime.
[COMMAND_EXECUTION]: The skill instructs the agent to execute diffity <ref> using the Bash tool. Because the <ref> argument is interpolated directly into the command string without validation or escaping, it creates a potential command injection vulnerability if the reference contains shell metacharacters.
[INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface.
Ingestion points: The ref argument accepts external GitHub PR URLs, which allows data from external pull requests to enter the agent's context.
Boundary markers: No boundary markers, encapsulation delimiters, or specific instructions to ignore embedded commands are present.
Capability inventory: The skill possesses extensive system capabilities via the Bash tool, including running global command-line utilities, executing background processes, and installing packages.
Sanitization: No sanitization, validation, or structural compliance checks are performed on the ingested ref URL or data before it is handled by the agent tools.

diffity-diff