The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npx with the -p flag to download the @claude-flow/plugin-iot-cognitum package from the public npm registry. Fetching with the @latest tag introduces risks from non-deterministic updates or potential supply chain compromise of the third-party package.
[REMOTE_CODE_EXECUTION]: The skill executes code from the downloaded package immediately via npx, which constitutes remote code execution from an unverifiable source.
[COMMAND_EXECUTION]: The skill leverages the Bash tool to run commands that orchestrate critical IoT firmware operations (deploy, advance, rollback) using the downloaded external package.

iot-firmware