The Agent Skills Directory

[SAFE]: The skill instructs the user to perform dependency audits and updates using official tools like npm audit, npm outdated, and npm-check-updates.
[EXTERNAL_DOWNLOADS]: The skill fetches the React changelog from Facebook's official GitHub repository (raw.githubusercontent.com/facebook/react/...). This targets a trusted organization and is used purely for informational purposes (reading documentation).
[COMMAND_EXECUTION]: The instructions involve standard development commands for package management (npm install), version control (git), and code transformation (npx react-codeshift). These are appropriate and necessary for the stated purpose of upgrading dependencies.
[DYNAMIC_EXECUTION]: A provided migration script uses fs and glob to automate search-and-replace operations in source files (e.g., updating deprecated React lifecycle methods). This is a standard "codemod" pattern for codebase migrations and does not involve executing untrusted strings or remote code.
[SAFE]: Configuration examples for automated tools like Renovate and Dependabot follow security best practices for dependency management.

dependency-upgrade