The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references several external dependencies in its templates and metadata with versions that do not currently exist in official registries. Specifically, templates/react-vite-app/package.json specifies typescript@^7.0.2 (current stable is 5.x), vite@^8.3.3 (current stable is 6.x), react@^19.3.0 (current stable is 19.0.x), and tailwindcss@^4.3.3. Similarly, templates/streamlit/pyproject.toml specifies plotly~=6.0.0 (current stable is 5.x). These futuristic version specifications represent a severe supply chain risk and possible dependency confusion vector.
[EXTERNAL_DOWNLOADS]: The skill includes instructions to download and execute an installation script from the vendor's repository (https://raw.githubusercontent.com/keboola/cli/main/install.sh) in references/glossary.md.
[REMOTE_CODE_EXECUTION]: In references/glossary.md, the documentation provides a command pattern (curl -LsSf ... | sh) to download and execute a remote script. While the source is a vendor-owned domain, this method bypasses verification and is considered a dangerous practice.
[INDIRECT_PROMPT_INJECTION]: The skill builds applications that ingest data from Keboola Storage (Ingestion points: runQuery in server/kbcQuery.ts, query_data in streamlit_app.py, and execute_aggregation_query in data_loader.py). These applications have capabilities to make further network requests to Keboola services, write to the filesystem, and perform SQL operations (Capability inventory). Although the skill provides extensive guidance on SQL injection prevention and manual sanitization (Sanitization), the generated app templates do not include automated boundary markers or 'ignore' instructions for external data (Boundary markers).
[COMMAND_EXECUTION]: The application templates include supervisord.conf and setup.sh files that execute shell commands to manage application lifecycle and install dependencies. These scripts run with the privileges of the application container.
[CREDENTIALS_SAFE]: The skill correctly identifies and warns against insecure practices like committing secrets in .streamlit/secrets.toml, recommending the use of environment variables and .env files for local development.

dataapp-development