The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill involves reading and evaluating a user's existing project files, including source code, shell scripts, and configuration files (e.g., package.json, tsconfig.json). This processing of untrusted data constitutes a surface for indirect prompt injection, as malicious instructions embedded within these files could potentially influence the agent's behavior during the upgrade process. The skill mitigates this by instructing the agent to strictly follow the defined task mode (assessment vs. execution) and prioritize project facts.
[COMMAND_EXECUTION]: The skill provides structured instructions and templates for executing standard development commands using pnpm, npm, node, and docker. These commands are used for dependency management, build verification, and running tests. The execution is scoped to the project environment and serves the primary purpose of verifying the success of technical migrations.
[EXTERNAL_DOWNLOADS]: The skill facilitates the installation of widely used Node.js packages from the official npm registry and the execution of official migration tools (e.g., pnpx codemod). These external references are standard for the modernization tasks described and do not target untrusted or malicious sources.

upgrade-project