The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill documentation covers frameworks that ingest external data (LLM sessions and WebViews), which represents a potential attack surface for apps using these APIs.
Ingestion points: LanguageModelSession in FoundationModels-Using-on-device-LLM-in-your-app.md and WebView in SwiftUI-WebKit-Integration.md.
Boundary markers: Suggested use of session instructions to steer AI behavior.
Capability inventory: Support for tool calling and script execution.
Sanitization: Documentation focuses on implementation rather than data validation.
[EXTERNAL_DOWNLOADS]: The skill mentions the official apple/app-store-server-library-swift repository on GitHub for transaction signing, which is a trusted developer resource.
[DYNAMIC_EXECUTION]: The documentation for WebKit integration includes standard usage examples for callJavaScript to interact with web content.

xcode-26