The Agent Skills Directory

[METADATA_POISONING]: Automated security scans flagged README.md and references/guide-migrate-from-tsup.md with a "FileRepMalware" malicious reputation. This suggests that the files, or the resources and packages they mention, are associated with suspicious patterns or origins.
[COMMAND_EXECUTION]: The skill documents the use of the onSuccess configuration option and CLI flag, which allows the execution of arbitrary shell commands after a build succeeds. Examples include running build scripts, starting servers, or executing tests. This capability can be exploited to run malicious commands if the project configuration (e.g., tsdown.config.ts) is compromised.
[DYNAMIC_EXECUTION]: The skill provides detailed guidance on using lifecycle hooks (build:prepare, build:before, build:done) that execute arbitrary JavaScript code. Documentation examples include performing file system operations, deploying assets to CDNs, and interacting with remote databases or APIs during the build process.
[INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to process and act upon project-specific files that may contain instructions targeting the agent's behavior.
Ingestion points: The agent reads project configuration files such as tsdown.config.ts, package.json, and TypeScript source files to determine build parameters and execution steps.
Boundary markers: No specific boundary markers or safety instructions are provided to help the agent distinguish between data and embedded instructions within the project files.
Capability inventory: The skill enables high-privilege operations including arbitrary shell command execution (onSuccess) and arbitrary JavaScript execution (hooks).
Sanitization: There are no instructions for sanitizing or validating the contents of configuration files before they are used to trigger command or script execution.
[EXTERNAL_DOWNLOADS]: The skill documents the exe option which, when used with the @tsdown/exe package, downloads Node.js binaries from nodejs.org to create standalone executables. While nodejs.org is a well-known service, the skill describes a process where external binaries are fetched and cached locally (~/Library/Caches/tsdown/node/) for execution.

tsdown