The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard migration commands such as uv add, rm, git commit, and docker build. These operations are transparently described and essential to the skill's stated purpose of migrating build systems.
[EXTERNAL_DOWNLOADS]: The Dockerfile template downloads the uv binary from ghcr.io/astral-sh/uv. GitHub Container Registry (ghcr.io) and the astral-sh organization are well-known and reputable entities in the software development ecosystem.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from local files like requirements.txt and Dockerfile to perform its migration tasks.
Ingestion points: Files requirements.txt, Dockerfile, and .github/workflows/push.yml are read using the Read and Grep tools.
Boundary markers: None explicitly defined in the instructions.
Capability inventory: Uses Bash for command execution, Write/Edit for file modification, and Task for invoking a trusted internal subagent.
Sanitization: None described, however, the logic is restricted to structural transformations and uses official tools (uv, ruff) to handle the data.
[SAFE]: All external URLs (GitHub, GHCR) and referenced packages are consistent with the vendor's (Keboola) infrastructure or are established industry tools like 'uv' and 'ruff'. The instructions for managing secrets in GitHub Actions follow security best practices by using standard ${{ secrets.NAME }} syntax rather than hardcoding credentials.

migrate-to-uv