The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Installs the @capawesome/cli package from the official NPM registry, which is the legitimate management tool provided by the vendor.- [COMMAND_EXECUTION]: Instructs the agent to execute shell commands via the CLI to perform administrative tasks such as app creation, triggering native builds, and managing deployment channels.- [CREDENTIALS_UNSAFE]: The skill manages sensitive materials including authentication tokens, app signing certificates (e.g., .p12, .jks), and private keys (e.g., .p8). These operations are core to the skill's purpose, and the instructions follow security best practices by recommending the use of environment variables and secrets.- [PROMPT_INJECTION]: The skill identifies vulnerability surfaces for indirect prompt injection by reading project configuration files such as capawesome.config.json and .env files. While these files are processed to configure CLI operations, no malicious override patterns were detected.

capawesome-cli