The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides a Node.js utility (scripts/semver.mjs) that performs file system operations (reading/writing the SEMVER file) and string manipulation for versioning. These operations are restricted to the project scope and do not execute external shell commands or arbitrary code.
[REMOTE_CODE_EXECUTION]: All code is provided within the skill package. There are no patterns involving remote script downloads or dynamic execution from external sources. The scripts/semver.mjs script uses standard Node.js APIs for file management.
[DATA_EXFILTRATION]: The skill does not perform network operations. All versioning logic is executed locally, and there is no evidence of sensitive data being accessed or transmitted externally.
[PROMPT_INJECTION]: The instructions are focused on guiding the agent through a structured versioning workflow. There are no attempts to override safety filters, extract system prompts, or bypass agent constraints.
[PRIVILEGE_ESCALATION]: The skill does not request administrative privileges or use commands like sudo. It operates within the standard file permissions of the user environment.
[INDIRECT_PROMPT_INJECTION]: While the skill processes version strings from local files (ingestion point), it applies strict regex validation (STABLE_SEMVER) to ensure the input matches MAJOR.MINOR.PATCH formats before processing, effectively mitigating potential injection from malformed version files.

specsfy-specialist-versioning