The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes common development commands such as cat, ls, find, and standard package managers (pnpm, npx) to inspect project structures and synchronize Capacitor plugins. These operations are limited to the local project environment.
[INDIRECT_PROMPT_INJECTION]: The skill processes project files like package.json and capacitor.config.*. While these files originate from the repository and could technically harbor malicious instructions if the codebase itself is untrusted, the skill treats them as data for inspection and configuration purposes.
[EXTERNAL_DOWNLOADS]: The instructions involve using pnpm install and npx cap sync, which fetch dependencies from established registries. This is expected behavior for maintaining mobile app wrappers and does not involve untrusted or suspicious remote sources.

ios-capacitor-shell