The Agent Skills Directory

[External Resource Interaction]: The companion script UpdateImageTags.cs queries several external container registries including Docker Hub, Microsoft Container Registry (MCR), GitHub Container Registry (GHCR), Oracle Container Registry, and Quay.io. These are well-known, industry-standard services used for retrieving container image metadata. The script follows standard OCI authentication flows to fetch anonymous tokens for registry access.
[Local Command Execution]: The skill uses dotnet run to execute its companion script and dotnet build to validate that image tag updates do not break the project compilation. These commands are executed locally within the repository context and are appropriate for a developer-oriented skill focused on repository maintenance.
[Indirect Prompt Injection Surface]: The skill processes data fetched from external registries (image tag names) through its companion script and then analyzes this data using the LLM. While processing external data is a potential injection surface, the skill implements strict version-matching rules and platform-suffix filtering, which significantly mitigates the risk of processing unexpected or malicious tag strings.
[Credential Management]: The skill correctly avoids hardcoded credentials. It uses standard HTTP headers to handle temporary, anonymous authentication tokens retrieved during the registry query process, which is a secure practice for interacting with public container registries.

update-container-images