The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes several Python scripts (analyze_library.py, scaffold_package.py, migrate_imports.py, update_docs.py) that perform extensive file system operations. These include reading project files, creating new package structures, modifying source code via regex-based import migration, and deleting vendored library files. These operations are aligned with the skill's primary function of project migration and library extraction.
[EXTERNAL_DOWNLOADS]: The scaffold_package.py script generates GitHub Actions workflows (test.yml, publish.yml) that reference external resources. Specifically, they use well-known actions from the official GitHub Actions and PyPA organizations (e.g., actions/checkout, actions/setup-python, pypa/gh-action-pypi-publish) and reference the Codecov service. These are standard practices for Python package CI/CD and do not represent a security risk.
[SAFE]: The analysis of the skill's logic, including its use of the ast module for Python parsing and template-based file generation, shows no evidence of malicious intent. No hardcoded credentials, obfuscated code, or unauthorized network communications were found. The tool is designed for developer productivity and follows standard software engineering patterns.

library-publisher