The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches framework source archives and configuration files from the official GitHub repository at github.com/lumosframework/lumos-for-astro. This is a documented vendor resource and follows standard update procedures.
[REMOTE_CODE_EXECUTION]: Framework code is downloaded via curl and extracted using tar to create a merge base for the migration. This code is sourced from a trusted vendor repository and is used to identify differences between framework versions.
[COMMAND_EXECUTION]: The skill automates several CLI tools to manage the upgrade process:
Uses git to commit changes and manage the migration state.
Uses npm and npx to update project dependencies and run framework-specific upgrade tools like @astrojs/upgrade.
Uses astro to run the development server and verify the build status.
The visual-check.mjs script executes local browser binaries (Google Chrome, Chromium, or Microsoft Edge) using execFile to capture screenshots of the site routes.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface by reading the project's package.json for version metadata and scanning the src/pages directory to map site routes.
Ingestion points: package.json and local filesystem scan of the src/pages directory.
Boundary markers: None present.
Capability inventory: Execution of shell commands (git, npm, astro), browser execution via execFile, and filesystem write access via tar and the sharp image library.
Sanitization: The skill uses a slug function to sanitize filenames for screenshots and employs execFile instead of exec to prevent shell-based command injection when invoking browser binaries. This behavior is consistent with the primary purpose of a migration tool and is considered safe.

lumos-upgrade-version