The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the modification of package.json to replace the legacy trtc-js-sdk package with the modern trtc-sdk-v5. Both packages are official releases from the developer (tencent-rtc), and this is a standard and safe part of the software upgrade lifecycle.
[COMMAND_EXECUTION]: The skill utilizes codebase search tools to identify specific v4 API patterns such as TRTC.createClient and client.join. This use of tools is appropriate for the skill's stated purpose of code analysis and migration.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data (user source code) which could potentially contain instructions aimed at the agent. However, several factors mitigate this risk:
Ingestion points: The skill reads files from the user's project directory to find code patterns.
Boundary markers: The skill architecture mandates a manual confirmation step (Step 3) where the migration plan is presented for user review before any modifications are applied.
Capability inventory: The skill uses replace_in_file for targeted text replacement, but no execution of the ingested code occurs.
Sanitization: The migration logic follows a static, vendor-provided mapping guide found in the references/migration-guide.md file.

v4-to-v5-migration