The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes dynamic context injection in the SKILL.md file to execute a shell command (node -e) at load time. This command reads the local package.json file to identify and display SQL-related dependencies as a 'Live Project Snapshot', which aids the agent in understanding the project state without manual input.
[EXTERNAL_DOWNLOADS]: The skill instructions include steps to download and install the @capgo/capacitor-fast-sql and sql.js packages from the public npm registry. These are expected dependencies for the skill's stated purpose of database migration.
[PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by ingesting untrusted data from the local file system into the agent's context.
Ingestion points: The 'Live Project Snapshot' section ingests package names and versions from the project's package.json file.
Boundary markers: The snapshot content is interpolated into the instructions without explicit delimiters or 'ignore' instructions to separate the data from the agent's core guidelines.
Capability inventory: The skill allows the use of shell commands via Bash(node -e *) to perform migration tasks and dependency management.
Sanitization: There is no validation or sanitization of the content extracted from package.json before it is presented to the agent.

sqlite-to-fast-sql