The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill includes maintenance scripts (verify_docs.py) that fetch official documentation from GitHub and Devin.ai to ensure the scaffolding logic matches current API contracts.
[COMMAND_EXECUTION]: The skill uses local shell commands (bash, git, jq, rg) and Python subprocesses to audit project structures and generate configuration files. This behavior is confined to the project root and intended for developer workflow automation.
[DYNAMIC_EXECUTION]: The scaffolding process generates Bash scripts and TypeScript plugins based on user-defined templates and plans. This is the primary function of the skill and includes security checks to prevent overwriting user-owned files or navigating outside the project directory.
[SAFEGUARDS]: The skill implements a robust path validation layer (scaffold_paths.sh) used by all components to prevent directory traversal and symlink attacks. It also includes comprehensive security tests (test_scaffold_security.py) that verify these protections.

scaffold-hooks