The Agent Skills Directory

[SAFE]: The skill serves as a technical guide for esbuild. All code snippets demonstrate legitimate use of the esbuild CLI and Node.js API for bundling, minification, and development server orchestration.
[EXTERNAL_DOWNLOADS]: The skill uses npx esbuild to execute the bundler. The esbuild package is a well-known, industry-standard tool for web development. References to esbuild.github.io point to the official documentation.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process source code files (e.g., src/index.ts), which constitutes a data ingestion surface.
Ingestion points: Source files like src/index.ts and src/app.tsx processed by the bundler in SKILL.md.
Boundary markers: Not explicitly defined within the example scripts.
Capability inventory: The skill utilizes shell execution (npx), file system writes (outfile), and network operations (ctx.serve) for local development.
Sanitization: Standard esbuild processing is used; no additional prompt-level sanitization is mentioned. As this is the core function of the tool, it represents a standard operational risk rather than a malicious finding.

esbuild