The Agent Skills Directory

[SAFE]: The skill utilizes official CLI tools, such as npm view, pip index, cargo search, gem search, and go list, to fetch package metadata directly from ecosystem registries.
[SAFE]: Network operations are restricted to well-known service providers and official package registries, specifically npmjs.org, pypi.org, golang.org, crates.io, and rubygems.org, for the purpose of retrieving JSON-formatted version metadata.
[SAFE]: The instructions include defensive measures against typosquatting by mandating package existence verification and warning users about deprecated packages.
[SAFE]: The skill employs jq for parsing remote JSON responses, which acts as a filter to extract specific version and configuration data, reducing the risk from potentially malicious external content.
[SAFE]: No evidence of credential harvesting, obfuscated code, malicious persistence, or unauthorized command execution was found across the primary skill or its reference files.

live-dependency-resolver