The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches Git repository data (blobs, trees, and commits) from https://gitlab.com/soundsystems/simple-changes.git to synchronize local forks with the upstream source. This operation is central to the skill's purpose and targets the vendor's infrastructure.
[COMMAND_EXECUTION]: The script uses Bun's spawnSync to execute Git CLI commands for repository discovery, versioning, and three-way merging. The implementation passes arguments as arrays rather than shell strings, effectively mitigating shell injection risks.
[DYNAMIC_EXECUTION]: During the update process, the skill writes and updates executable files (TypeScript and shell scripts) within the target fork directories. These files constitute the skill's logic being updated. The skill documentation and implementation emphasize that it does not execute these fork-owned scripts during the update cycle.
[SAFE]: The skill demonstrates high security maturity by implementing several protective layers:
Integrity Verification: Uses SHA-256 digests to ensure that files have not been modified between the planning and application phases.
Path Traversal Prevention: Includes a dedicated assertNoSymlinkPath function to recursively verify that no file operations traverse symbolic links, preventing arbitrary file access outside the target directory.
Strict Validation: Employs a comprehensive validateForkPlan routine that performs field-by-field validation and schema checking on operational plans before execution.

update-local-forks