The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses shell commands like git diff and git stash to manage file discovery and ensure recovery paths are available. It also employs grep and test to check for specific dependencies within the local environment, and runs npx prettier for automated code formatting.
[EXTERNAL_DOWNLOADS]: The skill invokes npx prettier, which may download the package from the official npm registry if it is not present locally. Prettier is a well-known service in the development community, and this behavior is standard for the tool's intended use.
[PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted content from local source files. (1) Ingestion points: File content is scanned and processed in Step 1 and Step 3 of SKILL.md. (2) Boundary markers: High-risk tasks in T03 and T04 require explicit user confirmation, and a 'no human in the loop' fallback skips these operations. (3) Capability inventory: The skill can read/write files and execute shell commands (git, npx). (4) Sanitization: The skill performs syntax validation using prettier --check after modifications.

yy-frontend-code-refine