The Agent Skills Directory

[COMMAND_EXECUTION]: The skill contains Python scripts in resources/implementation-playbook.md that utilize the subprocess.run module to interact with system-level package managers like npm and pip, as well as version control tools like git. These commands are used to fetch current dependency states and manage migration branches.
[REMOTE_CODE_EXECUTION]: The implementation playbook includes migration steps that recommend executing remote codemods via npx (e.g., react-codemod and @vue/migration-tool). This pattern involves downloading and executing code from the npm registry to automate code transformations.
[INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests and processes external data from package manager outputs and changelogs.
Ingestion points: npm_output.stdout and pip_output.stdout in resources/implementation-playbook.md, along with changelog text fetched during analysis.
Boundary markers: The skill parses tool output as JSON, but changelog data is processed as raw text without explicit delimiters.
Capability inventory: The skill possesses capabilities for shell command execution via subprocess.run across multiple scripts.
Sanitization: The skill uses standard JSON parsing for structured data and regex-based scanning for changelog analysis.
[DYNAMIC_EXECUTION]: The skill dynamically generates shell commands, migration guides, and test plans based on the runtime analysis of a project's dependency tree, which are then provided to the user for implementation.

framework-migration-deps-upgrade