The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads Freshworks Development Kit tarballs from the vendor's official CDN (cdn.freshdev.io) and retrieves the nvm installation script from its official GitHub repository. These sources are appropriate and expected for the tool's primary purpose of setting up a Freshworks app development environment.
[REMOTE_CODE_EXECUTION]: Instructions in the skill use the standard curl | bash pattern to install the Node Version Manager (nvm). While this pattern represents remote code execution, it targets a well-known developer tool from a reputable source, which is standard practice for environmental setup utilities.
[COMMAND_EXECUTION]: The skill uses shell commands to install and manage global NPM packages and background processes for app development (e.g., fdk run). It also provides utility scripts to manage these processes, including finding and terminating zombie processes using pgrep and kill, which are benign in this development context.
[PERSISTENCE]: To ensure the development environment remains active across sessions, the skill modifies shell configuration files such as ~/.zshrc and ~/.bashrc. These modifications are used to source the nvm manager and ensure the fdk command is available in the PATH. The skill follows best practices by creating timestamped backups of these configuration files before making changes.
[INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied version numbers as arguments, which are then interpolated into shell commands.
Ingestion points: Version strings provided for the /fw-setup-install and /fw-setup-downgrade commands (found in commands/fw-setup-install.md and commands/fw-setup-downgrade.md).
Boundary markers: The SKILL.md contains explicit instructions to the agent to validate and verify that user input is a valid semver string before execution.
Capability inventory: The skill uses the Task tool for shell command execution and local file access.
Sanitization: The instruction to strictly validate version strings as semver acts as a sanitization layer to prevent arbitrary command injection through malicious arguments.

fw-setup