The Agent Skills Directory

[COMMAND_EXECUTION]: The skill relies on the execution of several internal Python scripts (vault_lifecycle.py, vault_structure_plan.py, and vault_index_verify.py) to perform vault management tasks. These scripts interact directly with the local file system to move, rename, and delete files.
[EXTERNAL_DOWNLOADS]: The skill's documentation provides installation instructions that use external package managers, specifically npx and the claude CLI, to fetch components from the soia-team GitHub organization and plugin marketplace.
[SAFE_PRACTICE]: The scripts implement a robust confined path validation function that uses Python's Path.relative_to to ensure all file operations remain strictly within the boundaries of the user-provided vault directory, preventing directory traversal attacks.
[SAFE_PRACTICE]: The migration and cleanup processes use a plan-apply-verify workflow. A JSON manifest is generated first, describing all proposed changes and checking for blockers (like hash mismatches or duplicate targets), ensuring that no actions are taken without user review and confirmation.
[SAFE_PRACTICE]: File deletions are restricted by vault_structure_plan.py to specific OS metadata (e.g., .DS_Store) and empty Markdown files that have no incoming links, minimizing the risk of accidental data loss.

soia-pkm-manage-vault-lifecycle