The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes Bash tools to execute common git operations including status, branch, switch, and stash. These operations are limited to the git binary via the allowed-tools configuration in the frontmatter.- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it ingests untrusted data from the $ARGUMENTS variable to suggest branch names.
Ingestion points: $ARGUMENTS variable in SKILL.md.
Boundary markers: Absent.
Capability inventory: Shell command execution via Bash(git switch -c ...) in SKILL.md.
Sanitization: Step 3 defines explicit transformation rules (lowercase, kebab-case, filler word removal) that serve as a sanitization layer for the branch name. Furthermore, the skill requires explicit user confirmation via AskUserQuestion before the final command is executed, providing a manual oversight checkpoint.

git-branch