The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references the installation of Node.js packages @cartridge/connector and @cartridge/presets, which are official libraries from the skill's author (cartridge-gg). It also uses @capacitor/app, a well-known library for cross-platform development.
[COMMAND_EXECUTION]: Includes standard mobile development build commands such as pnpm install and pnpm exec expo prebuild to initialize the project environment and generate native modules.
[INDIRECT_PROMPT_INJECTION]: The skill outlines the implementation of deep link handlers (e.g., myapp://auth-callback) to receive authentication data from a browser. This identifies a surface for ingesting external data, though the implementation follows standard authentication flow patterns for mobile apps.
Ingestion points: Deep link URL handling via the appUrlOpen event in SKILL.md.
Boundary markers: The code provides a basic filter using event.url.includes("auth-callback") to verify the context of the incoming data.
Capability inventory: Transaction execution via session.executeFromOutside and controller.execute in the provided Swift, Kotlin, and TypeScript examples.
Sanitization: External URL data is passed to vendor-provided callback handlers for processing.

controller-native