The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard git commands (git diff, git log) for the purpose of session analysis. These commands are statically defined within the workflow and do not incorporate unvalidated user input into the shell environment.
[PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it ingests untrusted data from git history and codebase changes to extract insights. While no malicious payload was identified, this ingestion point could be targeted by instructions embedded in commit messages or code comments.
Ingestion points: git diff and git log output as specified in SKILL.md.
Boundary markers: Absent; the agent is instructed to analyze the raw output of the git commands.
Capability inventory: Bash (used for data gathering) and Write (used for persisting insights to memory files).
Sanitization: No sanitization or escaping is performed on the ingested git data before it is processed by the agent.

insight-extraction