The Agent Skills Directory

[SAFE]: The skill operates entirely within its stated scope as a migration assistant. The instructions are transparent, follow established development workflows, and provide multiple checkpoints for user confirmation before performing actions.- [EXTERNAL_DOWNLOADS]: The skill references and downloads official resources from the descope organization (e.g., github.com/descope/descope-migration) and uses standard package registries (NPM, PyPI) to install vendor-verified SDKs. These downloads are necessary for the migration process and originate from trusted sources.- [COMMAND_EXECUTION]: Local shell commands such as grep, find, and package manager commands (npm, pip, go) are used to scan the user's project for Auth0 configurations and to verify the application after migration. These are standard developer operations performed on the local environment.- [INDIRECT_PROMPT_INJECTION]: The skill performs static analysis on codebase files which could contain untrusted data. While this represents a technical attack surface for indirect prompt injection, the risk is managed by the skill's structure, which requires the generation of a migration plan and state file for user review before any execution. This surface is necessary for the skill's primary function.

auth0-to-descope