The Agent Skills Directory

[SAFE]: The skill provides purely informational documentation for pnpm, a widely used and disk-efficient package manager. It does not contain any executable scripts or hidden commands.- [METADATA_POISONING]: The metadata identifies 'Anthony Fu' as the author while the platform context lists 'fellipeutaka'. The skill explains this discrepancy by noting it was generated from Anthony Fu's official 'skills' repository, a well-known and trusted source in the developer community.- [INDIRECT_PROMPT_INJECTION]: The skill describes how an agent should interact with pnpm configuration files such as 'pnpm-workspace.yaml', '.npmrc', and '.pnpmfile.cjs'. While these files define the execution environment for dependency resolution and could be leveraged by a malicious project, the skill provides legitimate guidance on their standard usage. Ingestion points include project configuration files, and capabilities include standard CLI operations like 'pnpm install' and 'pnpm run'.- [REMOTE_CODE_EXECUTION]: The documentation includes the 'pnpm dlx' command, which is a standard feature for downloading and executing packages without local installation. This is documented for its intended purpose in development workflows.- [EXTERNAL_DOWNLOADS]: All external URLs mentioned in the skill point to the official pnpm website, the pnpm GitHub organization, or the reputable repositories of known open-source developers, all of which are considered trusted sources.

pnpm