The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes standard package management and development tools to perform dependency audits and code updates.
Evidence includes shell commands for npm, yarn, and specialized utilities like npm-check-updates, madge, and react-codeshift.
[INDIRECT_PROMPT_INJECTION]: The skill workflow involves reading external project documentation which presents a potential injection surface, though it is consistent with the primary skill purpose.
Ingestion points: CHANGELOG.md, MIGRATION.md.
Boundary markers: None provided for file content processing.
Capability inventory: High-level command execution (npm, npx) and file system access (fs.writeFileSync).
Sanitization: No explicit content sanitization for processed files is described.
[EXTERNAL_DOWNLOADS]: The skill fetches documentation from a well-known service under a trusted organization.
Evidence: Downloads changelog content from the official Facebook/React repository on GitHub using curl.

dependency-upgrade