The Agent Skills Directory

[SAFE]: The skill provides a robust framework for developing npm packages, emphasizing strict TypeScript configurations and modern linting tools. All included templates and scripts operate locally and follow industry-standard practices.
[INDIRECT_PROMPT_INJECTION]: The scaffolding script scripts/scaffold.ts interpolates user-provided metadata into project files. The implementation uses a restrictive regular expression for variable matching, which prevents exploitation of the template rendering logic. The data flow is typical for scaffolding tools and represents a negligible security surface.
[EXTERNAL_DOWNLOADS]: The skill instructions involve installing standard development dependencies (e.g., Vitest, Biome, ESLint) from the public npm registry. These are well-known, industry-standard tools and do not represent a security risk.

npm-package