The Agent Skills Directory

[COMMAND_EXECUTION]: The file scripts/create-release.md employs dynamic context injection (using the ! syntax) to execute local git commands such as git describe, git log, and git branch. These operations are limited to gathering repository metadata to inform the agent's release tasks and do not involve sensitive data access or network exfiltration.
[COMMAND_EXECUTION]: The skill facilitates the execution of git and gh CLI commands through shell scripts and a Python utility (scripts/release-scripts.sh and scripts/version-manager.py). These scripts are designed for version management and follow safe practices for handling command arguments and local file updates.
[PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface in scripts/create-release.md by reading git commit history and presenting it to the agent. While commit messages are untrusted data, the risk is mitigated by the specific context of release note generation and the absence of high-risk automated decision-making based on that data.

release-management