The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and act upon data from external, untrusted sources such as changelogs, migration guides, and security vulnerability reports. This content could potentially contain malicious instructions designed to influence the agent's actions during the dependency update or testing phases.
Ingestion points: The agent is instructed to read external changelogs and migration guides in Phase 2.
Boundary markers: There are no instructions for the agent to use delimiters or ignore embedded instructions within the external content.
Capability inventory: The workflow requires the agent to run test suites (command execution), update lock files (file write), and create pull requests.
Sanitization: The skill does not define any sanitization or validation steps for the content retrieved from external sources.
[NO_CODE]: The skill consists entirely of Markdown instructions and YAML metadata. It does not include any scripts, executable code, or complex configuration files that could hide traditional malware or automated attack vectors.

update-deps