The Agent Skills Directory

[SAFE]: The skill provides utility scripts to assist with design system component management, including path mapping and API parity checks.
[SAFE]: The scripts implement robust path validation by using realpath and checking paths against the repository root, which effectively prevents directory traversal vulnerabilities.
[SAFE]: The YAML parsing logic in token-map.ts uses safe configurations (failsafe schema and restricted aliases) to prevent potential security risks during data deserialization.
[SAFE]: No network connectivity or external resource fetching was detected; all operations are performed on local files within the repository scope.
[INDIRECT_PROMPT_INJECTION]: The skill processes repository files (source code, YAML configuration, documentation) which represents a potential injection surface. The ingestion points include the analysis scripts (e.g., api-parity.ts, token-map.ts), while the agent maintains capabilities for file modification and command execution within its environment. No explicit boundary markers or sanitization logic is present for the data extracted from these files.

seed-component