The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute various CLI tools within a containerized DDEV environment to manage the upgrade process. This includes ddev composer for dependency management, t3u for node management, and code refactoring tools like Rector and Fractor. These operations are conducted under a strict 'Worker protocol' that limits the scope of each execution to a single cause and requires inspectable evidence.
[EXTERNAL_DOWNLOADS]: The skill manages external dependencies through Composer, specifically targeting typo3/cms-core: ^14.3 and requiring extensions such as spooner/deployer-information. It mandates verifying release metadata and applying a 'latest stable by default' policy, which helps mitigate supply chain risks by ensuring that dependencies are up-to-date and verified against official sources.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests task definitions ('node briefs') to determine its actions. However, the risk is minimized by the skill's highly constrained execution environment and defensive invariants.
Ingestion points: Task-specific instructions and budgets are retrieved via t3u node-brief --node <id> as specified in SKILL.md.
Boundary markers: No explicit delimiter usage is mentioned for the content of the briefs, though they are treated as structured contracts.
Capability inventory: The agent has the capability to modify source code, update database schemas, and manage project dependencies.
Sanitization: The skill does not explicitly detail sanitization steps for brief content, but it enforces a 'One cause/pass' limit (≤10 files or ≤400 lines) and requires a second pass of analysis tools to verify outcomes, which significantly limits the impact of potentially malicious task instructions.

typo3-upgrade-migration