The Agent Skills Directory

[COMMAND_EXECUTION]: The skill performs shell operations via init-artifact.sh and bundle-artifact.sh, utilizing sed, tar, and pnpm. There is a potential command injection surface in the project initialization script where input is interpolated into a sed command.\n- [EXTERNAL_DOWNLOADS]: The skill automates the download of numerous frontend development packages and build tools from the NPM registry.\n- [REMOTE_CODE_EXECUTION]: The skill triggers the execution of remote scaffolding code through pnpm create vite to initialize new projects.\n- [PRIVILEGE_ESCALATION]: The setup script attempts a global installation of pnpm using npm install -g, which modifies the host system's global software environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project names and source code via init-artifact.sh and bundle-artifact.sh. It lacks explicit boundary markers or input sanitization, though it uses standard build capabilities including shell execution and file system access.\n- [DYNAMIC_EXECUTION]: The skill dynamically generates configuration files for Tailwind, PostCSS, and Parcel, and utilizes node -e for programmatic modification of JSON configuration files at runtime.

artifacts-builder