The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/check-compiler.sh executes a file path or command provided as a command-line argument via the variable "$compiler". While the script performs basic character validation on simple command names and uses double-quoting to prevent word splitting, it lacks sufficient integrity checks to ensure that the executable targeted by the user-supplied path is legitimate.
[EXTERNAL_DOWNLOADS]: The skill instructs the user to install typescript@^7 and @typescript/typescript6. At the time of analysis, TypeScript 7.0 is not a released version of the official software. Recommending the installation of non-existent versions of popular packages presents a supply-chain risk, as it encourages users to fetch packages that could be registered by malicious actors on public registries like NPM to exploit the version gap.
[PROMPT_INJECTION]: The skill's documentation includes deceptive references and "Primary Source" links to Microsoft domains (devblogs.microsoft.com and github.com/microsoft) that are currently non-existent or dead. These references appear to provide a false sense of authority for instructions regarding a non-existent 'Go-native' port of TypeScript, which could lead an agent or user to perform unsafe installation and configuration steps.

typescript-7