The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill's Error Handling section in SKILL.md instructs the agent to use or suggest sudo npm install -g @ionic/cli to bypass permission errors during global tool installation.
[COMMAND_EXECUTION]: The skill executes multiple shell commands to manage the application lifecycle, including installing CLI tools with npm install, scaffolding projects with ionic start, and running development servers via ionic serve as specified in SKILL.md.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates a command injection surface by interpolating user-supplied strings directly into shell commands without instructions for sanitization or escaping.
Ingestion points: Project configuration inputs (name, framework, template, package-id) collected in Step 2 of SKILL.md.
Boundary markers: None identified to separate user data from command structure.
Capability inventory: Shell execution of npm and ionic commands in SKILL.md and package installations in references/tailwind-css-setup.md.
Sanitization: There are no instructions to validate or sanitize the user-provided inputs before they are used in the command line.
[EXTERNAL_DOWNLOADS]: The skill downloads the @ionic/cli and Tailwind CSS related packages from the npm registry, which is a well-known service for JavaScript development.

ionic-app-creation