The Agent Skills Directory

[SAFE]: A detailed review of the skill's instructions, including the primary SKILL.md and the extensive examples and references, confirms that the content is strictly technical documentation for SvelteKit development. No malicious payloads, safety bypasses, or deceptive instructions were identified.
[EXTERNAL_DOWNLOADS]: The skill references official Svelte ecosystem packages such as @sveltejs/kit, @sveltejs/adapter-auto, and various deployment adapters (Vercel, Cloudflare, Netlify). These are well-known, trusted resources used for standard project dependency management and do not originate from untrusted or suspicious sources.
[COMMAND_EXECUTION]: The provided code snippets and instructions include standard project lifecycle commands like npx sv create, npm install, and npm run dev. These are legitimate developer workflows for bootstrapping and running SvelteKit applications and do not involve unauthorized or hidden shell execution.
[INDIRECT_PROMPT_INJECTION]: The skill documents how to handle external data using Web Standard APIs like FormData and URLSearchParams. While this describes the attack surface of applications built using these patterns, the skill does not contain instructions that would cause an agent to process malicious data in its own context, and it includes best-practice advice for secure environment variable management.

sveltekit-overview