The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs users to install zod@^4.0.0 via npm in SKILL.md and reference/migration-checklist.md. Given that the Zod library's current official version is 3.x, this promotes the installation of a potentially malicious or hijacked package name representing a phantom major version.
[REMOTE_CODE_EXECUTION]: The skill advises running npx zod-v3-to-v4 in SKILL.md and reference/migration-checklist.md. This command downloads and executes arbitrary code from an external registry without verification of the package's integrity or authorship, posing a high risk of system compromise.

zod4