The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/shadcn_add.py automates the installation of UI components by executing the npx shadcn command. This is implemented using subprocess.run with a list of arguments rather than a shell string, which is a secure practice that prevents command injection vulnerabilities.
[DYNAMIC_EXECUTION]: The scripts/tailwind_config_gen.py script generates Tailwind configuration files. It uses a strict regular expression (_VALID_PLUGIN_NAME) to validate plugin names before incorporating them into require() statements in the generated output, effectively preventing code injection into the configuration files.
[EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of packages from official and well-known registries (npm) and documentation from trusted domains (shadcn.com, tailwindcss.com). These operations are integral to the skill's primary purpose and use established, secure tools.

ui-styling