The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses composer outdated and composer audit to retrieve dependency information. These are standard commands for PHP project maintenance and pose no security risk in this context.
[EXTERNAL_DOWNLOADS]: The skill relies on Composer's native functionality to query package registries (e.g., Packagist). No unauthorized or suspicious remote scripts are downloaded or executed.
[PROMPT_INJECTION]: The potential for indirect prompt injection from package metadata was evaluated. Given the reporting-only nature of the skill and the use of standard development tools, the risk is minimal and handled by platform guardrails.

weekly-composer-dependency-audit