The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill contains a script (scripts/scaffold-repo.ts) that generates executable shell scripts (install.sh) and JavaScript entry points (bin/cli.js) by interpolating project metadata into predefined string templates at runtime.
[INDIRECT_PROMPT_INJECTION]: The repository scaffolding process accepts user-controlled inputs (such as project name, author, and description) and interpolates them directly into generated manifests and installation scripts without sanitization or escaping.
Ingestion points: Project metadata fields (skillName, author, desc) passed as CLI arguments to scripts/scaffold-repo.ts.
Boundary markers: Absent; the skill does not use delimiters or warnings to isolate untrusted data within the generated templates.
Capability inventory: The skill possesses file-writing capabilities (writeFile), permission management (chmod), and the ability to execute generated shell scripts via install.sh.
Sanitization: Absent; there is no evidence of input validation or shell escaping for the interpolated metadata.
[COMMAND_EXECUTION]: The skill's primary CLI entry point (bin/repo-craft.js) uses the spawn method to execute the scaffolding logic as a separate process through the Bun runtime.
[EXTERNAL_DOWNLOADS]: The documentation in references/runtime-setup.md provides instructions for downloading and installing the Bun runtime from its official website (bun.sh). This reference targets a well-known service and is a prerequisite for the skill's execution environment.

repo-craft-and-distribute