The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes common development tools such as git and ls to verify the state of the target directory and initialize the repository. It also executes stack-specific commands for linting, typechecking, and testing as part of its verification process.
[DYNAMIC_EXECUTION]: The skill triggers the execution of test runners and linters based on the technology stack confirmed by the user. This is a standard and expected behavior for a tool intended to verify a baseline project setup.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection by reading and acting upon the output of external commands (e.g., test results and linter output) in Step 3. However, this is the intended functionality for verifying project integrity, and the risk is mitigated by the structured nature of the scaffolding process.

bootstrap-repo