The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill provides an .env.example template that uses placeholders (e.g., 'sk_test_...') instead of hardcoded secrets, following security best practices for credential management.\n- [COMMAND_EXECUTION]: The project_bootstrapper.py script performs local file system operations such as directory creation and file writing to generate project structure. These actions are standard for project scaffolding and are restricted to the user-specified output directory.\n- [EXTERNAL_DOWNLOADS]: Dependencies listed in generated configurations (like package.json and requirements.txt) reference official, well-known packages from standard registries such as NPM and PyPI, representing standard development practice.\n- [INDIRECT_PROMPT_INJECTION]: The project_bootstrapper.py script reads a configuration JSON file to customize the generated project. While this is a data ingestion surface, its capabilities are limited to project scaffolding and do not pose a risk of arbitrary code execution.

saas-scaffolder