The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill automatically installs the @adobe/aem-cs-source-migration-dispatcher-converter package from the npm registry during the dispatcher conversion process. This is a trusted vendor package required for the skill's core functionality.
Evidence: scripts/dispatcher-run.js contains the ensureToolInstalled function which runs npm install for the Adobe migration tool.
[COMMAND_EXECUTION]: The skill executes local shell scripts and binaries to perform code analysis and conversion tasks.
Evidence: scripts/analyzer-runner.js uses execFileSync to run a local analyze.sh script.
Evidence: scripts/dispatcher-run.js uses spawnSync to execute the Node.js entry points of the dispatcher converter tool.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of Best Practices Analyzer (BPA) CSV files or Model Context Protocol (MCP) tool outputs. These findings influence which code files the agent attempts to modify.
Ingestion points: scripts/bpa-local-parser.js (CSV parsing) and scripts/bpa-findings-helper.js (MCP fetcher).
Boundary markers: The skill uses structured parsing logic (CSV columns) rather than free-text interpretation, which reduces the surface area for injection.
Capability inventory: The skill has the capability to read/write local files and execute specific analysis scripts.
Sanitization: The skill includes logic in scripts/osgi-config-runner.js to explicitly redact sensitive values during configuration scanning and verification steps in scripts/dispatcher-verify.js to ensure access control lists are not dropped.
[DYNAMIC_EXECUTION]: The skill identifies and executes specific JS scripts from the installed Adobe converter tool based on the detected configuration mode.
Evidence: scripts/dispatcher-run.js determines the executor path dynamically through the resolveExecutor function, which is restricted to a set of known vendor script names.

migration