The Agent Skills Directory

Command Execution: The skill utilizes local shell commands such as find, grep, dotnet, and aspire to inventory project files and validate the application graph. These operations are standard for development and scaffolding tools.
Sensitive File Access: During the scan phase, the skill inspects files like .env, appsettings.json, and secrets.json to identify connection strings and configuration values for migration. This is an intended functional requirement for local development automation.
External Dependencies: The skill references and installs official packages and tools from trusted sources, including Microsoft's official Aspire CLI and well-known observability libraries like OpenTelemetry. These downloads are directed to established registries (npm, PyPI, NuGet).
Indirect Prompt Injection Surface: Because the skill parses arbitrary repository content (source code and configuration) to generate instructions and code edits, it possesses an attack surface for indirect prompt injection. The skill mitigates this by using a multi-phase 'Propose then Edit' workflow that involves user confirmation.

aspireify