The Agent Skills Directory

[SAFE]: The skill serves as a migration guide for @luxalgo/vela. All external references (NPM packages and library documentation) are within the vendor's scope ('luxalgo').
[COMMAND_EXECUTION]: The skill mentions ripgrep patterns (e.g., require\(['"]@luxalgo/vela), but these are provided as informational search strings for the user to manually find and replace code patterns, not for automated execution by the agent.
[REMOTE_CODE_EXECUTION]: Instructions to upgrade packages via npm are standard development workflows and do not involve untrusted third-party scripts or piped remote execution.
[INDIRECT_PROMPT_INJECTION]: The skill involves processing existing project code through search patterns. While this is an ingestion surface, the patterns are static and the instructions are limited to refactoring, presenting a minimal risk profile for instruction injection.

upgrading-vela