The Agent Skills Directory

[SAFE]: The skill implements a secure workflow for project creation. It performs comprehensive preflight checks in preflight.sh to ensure the target environment is suitable and that the project name and target directory meet strict naming constraints.
[SAFE]: The overlay_templates.sh script includes strong path validation logic (assert_safe_destination). It explicitly rejects any file writes outside of the designated target directory and prevents following symlinks, effectively mitigating directory traversal and unauthorized file modification risks.
[SAFE]: The skill relies on standard, reputable package managers (pnpm) and official framework generators (create-next-app, create-astro). All external dependencies are well-known industry standards or originate from trusted organizations (e.g., Google, Cloudflare, OpenNext).
[SAFE]: Sensitive data management is handled according to best practices. The skill generates .dev.vars.example and ensures the .dev.vars file is automatically added to .gitignore, while instructing users to use official Cloudflare secret management tools for production credentials.

scaffold