The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends using npx degit to fetch the unplugin/unplugin-starter template from GitHub. This is a common and legitimate practice for initializing development projects from community-maintained templates.
[COMMAND_EXECUTION]: Instructions include standard package management and build commands such as pnpm run dev, pnpm run test, and pnpm run release. These represent typical development lifecycles for building and publishing software.
[REMOTE_CODE_EXECUTION]: The provided CI workflow template (assets/ci.yml) involves installing the @antfu/ni utility from the public npm registry. This is a common developer tool for managing dependencies and does not pose a security risk in this context.
[SAFE]: The skill's focus is entirely on documentation and scaffolding for plugin development. No evidence was found of prompt injection, data exfiltration, obfuscation, or persistence mechanisms.

arch-unplugin