The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill integrates official React components by fetching a registry from https://shadcn.freemius.com/all.json. This is a vendor-owned resource used for UI initialization.\n- [REMOTE_CODE_EXECUTION]: The instruction to use npx shadcn@latest add with a remote URL involves running a CLI tool that downloads and processes remote definitions to generate local code. This is a standard part of the vendor's component distribution workflow.\n- [SAFE]: The skill demonstrates a strong security posture by explicitly instructing that API keys must remain server-side and that the browser-side checkout overlay should never be trusted as the sole source of truth for entitlements.\n- [PROMPT_INJECTION]: The skill ingests pricing data from the vendor API, representing an indirect prompt injection surface. This is evaluated as safe due to the trusted source and structured data handling.\n
Ingestion points: GET /api/checkout/pricing (referenced in references/pricing-tables.md components)\n
Boundary markers: Data is processed as structured JSON.\n
Capability inventory: Network requests (fetch) and iframe-based checkout overlay.\n
Sanitization: React's automatic output escaping during rendering.

freemius-checkout