The Agent Skills Directory

[COMMAND_EXECUTION]: The utility scripts scripts/check-blocks-contract.mjs and scripts/sync-registry-content.mjs utilize execFileSync to run git and pnpm commands. These operations are scoped to a local repository path to verify commit history, worktree cleanliness, and build artifacts.
[EXTERNAL_DOWNLOADS]: The scripts/sync-package-resolutions.mjs script performs network requests to the official npm registry (registry.npmjs.org) to fetch package metadata and verify Subresource Integrity (SRI) hashes for dependencies.
[SAFE]: The skill architecture is centered on 'contract-driven' verification. It uses an extensive attestation system to ensure that every registry item, install plan, and package resolution matches pinned byte-for-byte hashes, effectively mitigating supply chain risks. No malicious obfuscation, exfiltration, or injection patterns were detected.

constructive-blocks