The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes several shell commands to determine state and perform actions, including gh api user for identity, git diff for context, and git checkout -b for branch creation.
[PROMPT_INJECTION]: The skill processes untrusted data from local repository files, presenting a surface for indirect prompt injection.
Ingestion points: The skill reads output from git diff, git diff --cached, and git status --short in SKILL.md to understand the work being performed.
Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard potential instructions hidden within the diff output.
Capability inventory: The skill can execute shell commands like git checkout -b <branch-name> and git checkout <default-branch> using the derived descriptions.
Sanitization: The skill includes explicit instructions in Step 4 for formatting the generated description (kebab-case, ASCII only, specific character exclusions), which serves as a control to prevent malicious strings from becoming part of a shell command.

create-branch