The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions in SKILL.md require the user to run npx --yes serve-sim@latest. This command downloads the latest version of the serve-sim package from the public NPM registry at runtime without integrity checks or version pinning, which poses a supply chain risk.
[REMOTE_CODE_EXECUTION]: The execution of an unverified remote package via npx constitutes remote code execution as it fetches and runs external code from a remote repository immediately upon download.
[COMMAND_EXECUTION]: The script scripts/swiftui-preview-browser.mjs executes numerous system commands including xcodebuild, xcrun, and swift. These commands are used to build, install, and manage applications on the host machine. Furthermore, the script dynamically generates Xcode project files and Swift source code in temporary directories that are then compiled and executed.
[PROMPT_INJECTION]: The skill processes external data from local Package.swift files and user-provided target names and regex filters. This ingestion of untrusted local data to generate source code and project manifests represents a surface for indirect prompt injection, where a malicious project file could influence the build process or the agent's downstream behavior.

ios-simulator-browser