The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes several shell commands to manage dependencies and skills.
Runs npx remotion upgrade to automate the upgrade process when the CLI is present.
Executes npm view commands to fetch version metadata and dependency trees from the npm registry.
Uses npx skills update to synchronize and update local Remotion-related agent skills.
Runs npx remotion versions as a post-upgrade verification step.
[EXTERNAL_DOWNLOADS]: The skill interacts with external package registries to perform updates.
Fetches version information and dependency lists from the npm registry for remotion, @remotion/studio, and auxiliary packages like mediabunny.
Downloads and installs package updates through the project's native package manager.
[INDIRECT_PROMPT_INJECTION]: The skill has a potential attack surface by processing untrusted project files.
Ingestion points: Project manifests (package.json) and lockfiles (package-lock.json, yarn.lock, pnpm-lock.yaml).
Boundary markers: None; the skill reads these files directly to identify package managers and dependency versions.
Capability inventory: Full shell command execution via npx and npm, and the ability to modify project configuration files.
Sanitization: No explicit sanitization or validation of the manifest content is described before using the data to determine command arguments or version strings.

remotion-upgrade