The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local shell commands such as npm audit, npm test, and git to automate vulnerability assessment and remediation. These commands are integral to the skill's primary function of managing project dependencies.\n- [EXTERNAL_DOWNLOADS]: The CI/CD workflow configuration integrates with the well-known security service Snyk via its official GitHub Action (snyk/actions/node) and uses official GitHub actions for environment setup.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external vulnerability reports (npm audit/Snyk). This ingestion of untrusted data is the primary purpose of the skill; the data is handled via structured JSON parsing in scripts/parse-audit.ts to generate prioritized patch plans.\n
Ingestion points: Vulnerability data is ingested via npm audit --json in SKILL.md.\n
Boundary markers: Not explicitly defined in the logic, though data is processed as structured JSON.\n
Capability inventory: The skill uses execSync for shell execution and has file-writing capabilities through standard shell redirection.\n
Sanitization: Relies on standard JSON parsing and jq for data handling.

dependency-vulnerability-triage