The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends installing and using the capslock tool from Google's official GitHub repository to perform capability analysis for Go modules.
[COMMAND_EXECUTION]: The skill utilizes standard language toolchain commands, including go list, go mod, govulncheck, npm audit, and pip-audit, to gather technical metadata and vulnerability information about dependencies.
[DATA_EXFILTRATION]: The skill accesses local project manifests and searches organizational code repositories (using Sourcegraph or GitHub search) to verify internal precedent and consistency for candidate libraries.
[PROMPT_INJECTION]: The skill processes untrusted content from external sources, such as dependency READMEs and issue trackers, as part of its evaluation workflow.
Ingestion points: SKILL.md (processes READMEs, metadata, and issue data from public registries).
Boundary markers: None identified.
Capability inventory: SKILL.md and references/go.md (executes shell commands for package analysis and capability scanning).
Sanitization: None identified.

evaluate-dependency