The Agent Skills Directory

[SAFE]: The skill defines a standard maintenance workflow for Drupal applications using legitimate tools (Composer, Git, and Drush).
[SAFE]: It incorporates security best practices by recommending the use of composer audit to check for known vulnerabilities in dependencies after an update.
[SAFE]: Network operations are restricted to standard package management tasks performed by Composer, which is the primary and stated purpose of the skill.
[SAFE]: Command execution is limited to user-confirmed maintenance operations with no evidence of privilege escalation, persistence, or data exfiltration.
[SAFE]: The skill includes safety checks such as mandatory branch creation before running updates to prevent accidental changes to protected branches.

dependency-updates