The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/verify.sh script executes local project-specific binaries (eslint, tsc, vitest, vite) to validate code quality and build status. It uses a secure resolution pattern that prioritizes local node_modules or uses npx --no-install to ensure no unauthorized external code is downloaded during the verification process.
[DATA_EXPOSURE]: The skill provides explicit security warnings in SKILL.md regarding the exposure of environment variables in Vite projects. It correctly identifies that any variable prefixed with VITE_ is bundled into the client-side code and is publicly accessible, advising developers to use backend proxies for sensitive secrets. This demonstrates a strong security posture.
[SAFE]: The skill's architecture relies on well-known, industry-standard dependencies (e.g., TanStack Query, Zustand, React Router) and implements standard patterns for data fetching and state management that mitigate common vulnerabilities like race conditions and memory leaks. No malicious obfuscation, exfiltration, or persistence patterns were found.

react