The Agent Skills Directory

[SAFE]: The skill is a technical guide and checklist for managing third-party libraries. It focuses on reducing supply chain risk through systematic auditing and controlled upgrade processes.
[COMMAND_EXECUTION]: The skill includes documentation for running standard diagnostic and auditing commands.
Evidence includes shell snippets for npm audit, pip-audit, bundle audit, and npm ls.
These commands are diagnostic in nature and are intended to be run by the user to identify vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill references standard package managers (npm, pip, yarn, gem) and automated update tools like Dependabot and Renovate.
These are industry-standard tools for managing dependencies and do not constitute a security risk in this context.
[INDIRECT_PROMPT_INJECTION]: The skill defines workflows for processing external data such as security advisories and dependency lists.
While this data originates from external sources, the skill recommends using structured output (--json) and professional auditing tools, which reduces the surface for injection. The instructions do not facilitate the execution of untrusted instructions found within that data.

dependency-management