The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill facilitates the execution of shell scripts (scripts/check-tool.sh, scripts/run-taze.sh) and standard package manager commands (e.g., npm, pip, go, cargo). It also recommends installing well-known third-party dependency management tools. These resources originate from official package registries or reputable open-source maintainers, and their execution is strictly limited to the skill's primary purpose of dependency management.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted project configuration files (e.g., package.json, requirements.txt, go.mod) to detect outdated packages. While this constitutes an ingestion surface for external data, the risk is mitigated by the use of specialized parsing tools which process these files semantically rather than executing their content directly.

dependency-updater