The Agent Skills Directory

[Command Execution]: The skill includes a Python helper script (upgrade_bom.py) that executes local build tools (mvn or gradle/gradlew) via the subprocess module to run OpenRewrite recipes. This is a potential area to review, but it is used securely with structured list arguments rather than an unsafe shell execution string (shell=True), fitting the primary purpose of automating dependency upgrades.
[Workspace Ingestion Surface]: The workflow involves analyzing and parsing user repository files, such as pom.xml and build.gradle configuration files. While standard for migration tools, processing untrusted codebases introduces a surface area for indirect prompt injection or build-time plugin execution if the repository contains unverified configurations.

azure-upgrade