The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill performs dynamic loading of JavaScript modules from the local repository workspace.
In scripts/select-update.js and scripts/verify-update.js, the script dynamically imports commitlint.config.js using await import().
The use of a computed path (pathToFileURL(configFile).href) to load and execute configuration logic means the agent will run arbitrary JavaScript code provided in the repository's root.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data during its dependency review process, creating a risk for indirect prompt injection.
Ingestion points: The agent ingests external package manifests, GitHub pull request details, and specifically "target release notes and package metadata" from external registries like npm.
Boundary markers: There are no explicit delimiters or instructions defined in the skill to treat the fetched release notes as untrusted or to ignore embedded instructions within them.
Capability inventory: The skill has significant capabilities, including executing shell commands (pnpm install, pnpm run ci), committing to the repository, and creating pull requests via the GitHub CLI.
Sanitization: External metadata and release notes are reviewed without sanitization, allowing potential malicious instructions in package documentation to influence agent behavior.
[COMMAND_EXECUTION]: The agent relies on executing multiple shell commands to manage dependencies and validate the repository state.
It invokes git, gh (GitHub CLI), mise, and pnpm using execFile. While arguments are passed as arrays to mitigate injection, these commands operate on data retrieved from the environment.
The execution flow includes fetching remote branches, checking authentication status, and running local CI targets.
[EXTERNAL_DOWNLOADS]: The skill's primary function involves downloading third-party code from external registries.
It performs pnpm install, which downloads and installs packages from the npm registry.
It also monitors and updates GitHub Actions within the actions/* namespace, which involves fetching configuration and code from GitHub-owned repositories.

agent-dependencies