The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes two shell scripts, install.sh and test.sh. Both scripts are used for basic environment verification, such as checking for the presence of python3 and verifying the existence of the SKILL.md file. Neither script performs unauthorized or dangerous operations.
[EXTERNAL_DOWNLOADS]: The documentation and code examples refer to several external libraries. While standard packages like @mui/material and @tanstack/react-query are correctly recommended, there are several instances of a typographical error where react-hook-form is referred to as react-hook-blog. These references are in markdown only and do not represent a supply chain attack or automated malicious download.
[SAFE]: No evidence of malicious behavior across all 10 threat categories was found. The skill does not attempt to access credentials, exfiltrate data, or bypass safety filters. No obfuscation or dynamic code execution patterns were detected.

frontend-dev-guidelines