The Agent Skills Directory

[COMMAND_EXECUTION]: The skill facilitates the execution of various CLI tools including pnpm, vitest, playwright, and the GitHub gh CLI. These are used for package management, running test suites, and synchronizing work items with GitHub Issues as part of the standard toolchain workflow.
[EXTERNAL_DOWNLOADS]: Fetches and installs dependencies from the npm registry and downloads specific skills from the github.com/ariestools/ariestools-skills repository. It also manages the installation of browser binaries for testing via Playwright. These resources originate from the vendor's own infrastructure or well-known development services.
[INDIRECT_PROMPT_INJECTION]: The skill acts on various project artifacts such as package.json, xy.config.ts, and Markdown documentation (e.g., AGENTS.md, papers/, docs/). This ingestion of project-specific content represents a standard attack surface for indirect prompt injection, though it is inherent to the tool's purpose of project auditing and management.
[DYNAMIC_EXECUTION]: Utilizes esbuild and tsc to dynamically compile and generate JavaScript and declaration files from TypeScript source code. It also supports experimental features like the TypeScript 7 native compiler alias.

xy-toolchain