The Agent Skills Directory

[COMMAND_EXECUTION]: The skill invokes a bundled Python utility migrate_from_nemo_flow.py to perform the migration. The script is designed with significant security controls, including the use of directory-relative operations (dir_fd) and the O_NOFOLLOW flag to prevent symlink attacks and path traversal vulnerabilities.
[DYNAMIC_EXECUTION]: The script uses ctypes.CDLL(None) to interface with the system's C library. This is used exclusively to access platform-specific atomic rename functions (renameat2 on Linux and renameatx_np on macOS) to ensure filesystem mutations are safe and atomic.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user codebase data during the migration process.
Ingestion points: The migrate_from_nemo_flow.py script recursively scans a target directory provided by the user.
Boundary markers: The instructions mandate a dry-run phase and explicit user confirmation of the target path before any modifications occur.
Capability inventory: The script possesses file read, write, and rename capabilities, but restricts these to regular files within a validated directory structure.
Sanitization: The script filters for specific text-based file extensions, skips binary files (detecting null bytes), and implements is_safe_entry checks to ensure no operations occur outside the confirmed root.

nemo-relay-migrate-from-flow