The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill instructs users to run npx shadcn@latest add @elements/sfx-{name}. This command downloads and executes scripts to integrate components from the @elements registry. As this registry is not from a verified trusted organization, it may execute arbitrary code during the setup process.\n- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download binary files (MP3s) and metadata (JSON) from https://tryelements.dev. Fetching resources from an unverified external domain poses a security risk if the domain is compromised or used to distribute malicious content.\n- [COMMAND_EXECUTION]: The skill includes shell commands like curl and npx to interact with external services. These commands could be exploited if malicious inputs are processed, particularly when downloading and executing content from unverified sources.

sfx-elements