The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides guidance and implementation patterns for tea.ExecProcess, a legitimate library feature used to suspend the TUI and launch external programs like text editors or pagers. This functionality is documented for standard terminal hand-off workflows.
[EXTERNAL_DOWNLOADS]: The documentation includes educational examples of performing network operations within the Bubble Tea event loop, such as fetching data from an API using http.Get wrapped in an asynchronous tea.Cmd.
[INDIRECT_PROMPT_INJECTION]: The skill documents an attack surface for indirect prompt injection as it facilitates building interactive applications that ingest untrusted data from multiple sources.
Ingestion points: Interfacing with user input via textinput and textarea bubbles, reading from the file system through filepicker, and accessing the system clipboard.
Boundary markers: While the skill focuses on layout and terminal compatibility, it does not explicitly instruct on sanitizing input before it is used in external commands or rendered, which is a common requirement for TUI applications.
Capability inventory: The documented capabilities include network communication and external process execution, which represent the potential impact surface for injected instructions.
Sanitization: The skill emphasizes ANSI-aware processing for visual correctness but does not include security-specific sanitization routines for untrusted input.

golang-tui