The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches documentation and migration codemods from well-known sources, such as the official React repository on GitHub.
[REMOTE_CODE_EXECUTION]: Documents the use of jscodeshift to execute transformation scripts from remote URLs. The provided example uses a trusted source from the reactjs organization.
[COMMAND_EXECUTION]: Utilizes various package management commands (npm, yarn) and analysis tools (npm-check-updates, madge) to manage dependencies and visualize project structures.
[DYNAMIC_EXECUTION]: Includes a custom migration script that dynamically reads, modifies, and writes back to local source files using fs and glob modules.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources like CHANGELOG.md and parses local project files, which could potentially expose the agent to instructions embedded in that data.
Ingestion points: Remote changelogs via curl, local project files via glob search.
Boundary markers: None present in the example processing scripts.
Capability inventory: Shell command execution (npm/yarn), remote code execution (jscodeshift), and local file system writes.
Sanitization: No sanitization or validation of the ingested content is demonstrated in the provided scripts.

dependency-upgrade