The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to use standard package manager commands (npm, pnpm, yarn, bun) to inspect the project's dependency tree and lockfiles. It also utilizes search utilities like ripgrep (rg) and grep to locate relevant code patterns for modification.
[EXTERNAL_DOWNLOADS]: The instructions reference official vendor resources, including the cva GitHub repository and documentation site (cva.style), for researching release history and breaking changes. These references are used solely for information gathering related to the migration process.
[INDIRECT_PROMPT_INJECTION]: The skill has the surface area to ingest untrusted data from the project's source code and manifests while possessing file-write and package installation capabilities. However, it provides specific boundary instructions and relies on established development workflows, which aligns with its intended purpose of code maintenance.

cva-migrate