The Agent Skills Directory

[PROMPT_INJECTION]: The skill implements an "Unguided" mode (documented in SKILL.md and multiple framework setup references) that instructs subagents to "suspend consent gates" and "proceed with the modification without asking". This pattern of pre-approving broad, multi-file modifications reduces the user's opportunity to audit specific changes before they are applied to the codebase.- [DYNAMIC_EXECUTION]: The skill generates several executable Node.js scripts (e.g., scripts/xliff-to-json.mjs, scripts/build-locales.mjs, scripts/checkLocales.mjs) and utilizes node -e to execute logic during its verification phases. These generated artifacts become part of the project's build infrastructure and are executed by the agent to validate the internationalization setup.- [EXTERNAL_DOWNLOADS]: The setup for the Paraglide library (references/languages/js-ts/libraries/paraglide/paraglide.setup.md) configures the inlang project to fetch and execute plugins from remote CDN URLs (cdn.jsdelivr.net) during the compilation process. While these are vendor-provided resources, they are loaded and executed outside of the project's primary package management system.- [INDIRECT_PROMPT_INJECTION]: The skill has a significant attack surface for indirect prompt injection due to its core functionality of reading and processing project source files.
Ingestion points: Reads project configuration (package.json, Gemfile, AndroidManifest.xml) and source code (TS, JS, Vue, Svelte, ERB, Swift, XML) across the entire repository.
Boundary markers: The instructions do not consistently use clear delimiters or explicit "ignore instructions" warnings when interpolating content from the user's project files into the instructions for its subagents.
Capability inventory: The skill possesses extensive capabilities, including shell command execution, package installation, and arbitrary file system writes.
Sanitization: There is no evidence of robust validation or filtering of content read from the local project files before it is processed by the AI subagents.- [COMMAND_EXECUTION]: The skill executes multiple build-time commands and package managers (npm, pnpm, yarn, bun, bundle, gradlew, xcodebuild) to install dependencies, compile catalogs, and verify the project state.

globalize-guide