The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references and instructs the installation of several packages from the TanStack organization (e.g., @tanstack/react-hotkeys, @tanstack/hotkeys, and associated devtools) using the bun package manager. It also directs the agent to fetch documentation from official sources including tanstack.com and GitHub repositories under the TanStack organization. These resources are provided by a well-known technology organization.
[INDIRECT_PROMPT_INJECTION]: The skill provides instructions for handling user-authored keyboard shortcut strings, creating a surface for indirect prompt injection where untrusted data could influence application behavior.
Ingestion points: The skill processes user-provided hotkey strings and sequence bindings within settings interfaces, as described in references/sequences-recording-state.md.
Boundary markers: The instructions emphasize the use of normalization and validation logic, but the skill does not define explicit text-based delimiters for the shortcut data itself.
Capability inventory: The skill is designed to register browser-level event listeners via React hooks (useHotkey, useHotkeySequence). There are no capabilities for shell command execution, file system modification, or unauthorized network operations based on the processed strings.
Sanitization: The skill recommends the use of validateHotkey to identify errors and normalizeHotkey to transform inputs into canonical formats before they are registered.

tanstack-hotkeys