The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands, including go install, shadcn-templ, templui, templ generate, and go mod tidy to initialize projects and manage UI components.
[EXTERNAL_DOWNLOADS]: The skill references external resources for tool installation and script inclusion, such as downloading CLI tools from GitHub repositories and fetching the Alpine-Morph extension for HTMX from a public CDN (unpkg.com).
[INDIRECT_PROMPT_INJECTION]: The skill possesses a typical developer-tooling attack surface by ingesting untrusted project data:
Ingestion points: Reads go.mod, .templui.json, components.json, and local component source files from the user's workspace to determine the project version and configuration.
Boundary markers: None explicitly defined for these configuration files.
Capability inventory: Executes shell commands (go install, shadcn-templ add, templ generate) based on the analyzed configuration.
Sanitization: While the skill provides detailed guidance on preventing XSS via proper Go-to-JavaScript interpolation, it does not explicitly instruct on sanitizing input read from project files before passing it to CLI tools.

templui