The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs several well-known packages via NPM, including @tanstack/react-query, pocketbase, and pocketbase-typegen, and utilizes npx for scaffolding tools like create-tsrouter-app and shadcn. It also fetches the PocketBase binary from its official GitHub repository. These are all trusted and well-known services.
[COMMAND_EXECUTION]: The instructions involve executing standard shell commands for project scaffolding, dependency installation, and build processes. It also includes a command to run the PocketBase server in the background using nohup for development purposes.
[INDIRECT_PROMPT_INJECTION]: The skill generates project files and source code based on the user's environment and preferences. While this creates an attack surface for indirect prompt injection, the skill mitigates risk by providing explicit templates and instructing the agent to confirm sensitive parameters (like credentials) with the user.

pb-react-spa