The Agent Skills Directory

[SAFE]: The skill operates entirely locally on repository files to manage semantic versioning. It does not perform any network operations or external data exfiltration.
[SAFE]: Input validation is performed on version strings using a strict regex (^[0-9]+\.[0-9]+\.[0-9]+$) in the normalize function within assets/versioning.sh. This ensures that version numbers used in sed and jq commands are sanitised, preventing command injection.
[SAFE]: The init.sh script automates the discovery of version-bearing files and the installation of the versioning engine. All file system operations (writing to mise.toml and .mise/version-files.conf) are restricted to the repository root and are consistent with the skill's stated purpose.
[SAFE]: The logic for reading and writing versions across different formats (JSON, TOML, XML, Gradle) uses standard tools like jq, grep, and sed with specific anchoring to prevent accidental modification of dependency pins or unrelated code.

mise-versioning