The Agent Skills Directory

[COMMAND_EXECUTION]: The skill implements several utility scripts (dependency_audit.py, staged_upgrade.py, and rollback.py) that utilize subprocess.run to interact with system tools such as npm, pip, git, and alembic. This allows the agent to modify the local environment and source control state.
[COMMAND_EXECUTION]: In rollback.py, the RollbackManager.rollback_to method executes arbitrary commands from a list using subprocess.run(cmd, shell=True). This implementation enables the execution of any shell string stored within a rollback point, which could be exploited to run malicious commands if a rollback configuration is maliciously constructed.
[EXTERNAL_DOWNLOADS]: The StagedUpgrader class in staged_upgrade.py automates the installation of remote packages via npm install, which involves downloading and executing code from the external npm registry during the migration process.
[COMMAND_EXECUTION]: The ast_codemod.py and codemod-example.ts scripts provide patterns for programmatically rewriting local source files. This represents a significant capability for mass file modification on the host system.

loom-code-migration