The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill executes npm install in its base directory to download the marked, marked-highlight, and highlight.js packages from the official NPM registry. These are well-known, standard libraries used for markdown parsing and syntax highlighting.\n- [COMMAND_EXECUTION]: The skill uses shell commands to perform its core functions, including git diff to retrieve repository changes, npm install for dependency setup, and the system's open command to display the generated HTML walkthrough.\n- [DATA_EXPOSURE]: The skill accesses local git history and diffs to generate documentation. All generated markdown and HTML files are stored within the skill's own tmp directory on the local filesystem. No network exfiltration of this data was observed.\n- [INDIRECT_PROMPT_INJECTION]:\n
Ingestion points: The skill reads untrusted data from git diff output (SKILL.md Step 2).\n
Boundary markers: The collected data is interpolated into markdown files using code block delimiters.\n
Capability inventory: The skill can install npm packages, write files to its own directory, and open the system browser.\n
Sanitization: Content is processed through the marked library in scripts/md-to-html.js for HTML conversion, which provides standard parsing of markdown elements.

change-walkthrough