The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill automates the installation of external agent skills using pnpm dlx skills@latest. These downloads target identified user repositories (k5-mot/skills, mattpocock/skills) and utilize the standard pnpm ecosystem for package acquisition. This is a common pattern for environment setup skills and is considered safe when targeting known community providers.
[COMMAND_EXECUTION]: The skill uses uv run and pnpm exec to initialize project tools (graphify and openspec). These are legitimate development tools for repository architecture and specification management. While they involve local command execution, the operations are restricted to project initialization and configuration management within the current directory.
[SAFE]: No signs of prompt injection, obfuscation, or suspicious persistence mechanisms were detected. The use of --force in the OpenSpec initialization is explicitly documented with a warning about potential configuration overwrites, following best practices for user transparency.

init-project