The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes aio app build to validate configurations and npx @adobe/aio-commerce-lib-app init to scaffold the project. These are official tools provided by the vendor (Adobe) to manage Commerce App extensions.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs to generate configuration entries in app.commerce.config.ts and ext.config.yaml.
Ingestion points: Data enters via the user prompt (intent) and by reading the existing app.commerce.config.ts file.
Boundary markers: The skill uses a structured 'Derive config values' step to validate data before injection.
Capability inventory: The skill can write files and execute local shell commands (aio, npx).
Sanitization: The skill enforces strict regex validation ([a-zA-Z0-9_]+) for identifiers like batch_name and hook_name to prevent injection into the configuration schema.
[DYNAMIC_EXECUTION]: The skill generates a source code skeleton for Node.js actions (handlers). This is a standard template-based code generation practice for developer productivity tools and does not involve untrusted data in the execution path of the generator itself.

commerce-app-webhooks