The Agent Skills Directory

[DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context syntax to perform environment discovery during load time. It runs benign commands such as xcode-select, brew --version, and find to check for prerequisites and identify project files. These commands are used for discovery purposes and do not involve sensitive data exfiltration or unauthorized system modification.\n- [EXTERNAL_DOWNLOADS]: The skill provides a suggested command for installing Homebrew which references a script from GitHub (raw.githubusercontent.com/Homebrew/install/HEAD/install.sh). As Homebrew is a well-known service and the reference is for user-initiated installation, this is considered a safe reference to a trusted source.\n- [INDIRECT_PROMPT_INJECTION]: The skill extracts information like Bundle IDs and Team IDs from .pbxproj files using grep. This creates a surface for indirect prompt injection if project files contain malicious content. However, the extracted data is sanitized with sed and tr, and the risk is considered low within the context of project setup tasks.

setup-fastlane