The Agent Skills Directory

[PROMPT_INJECTION]: The skill documents an indirect prompt injection surface where third-party metadata from a public registry is used to influence automated code injection and package installation. This is a documented architectural feature of the devtools suite.
Ingestion points: The registry file packages/devtools/src/tabs/plugin-registry.ts which receives contributions via Pull Request.
Boundary markers: No explicit delimiters are used for registry data; however, the data follows a strict TypeScript interface (PluginMetadata).
Capability inventory: Automated npm install execution, AST transformation using oxc-parser, and file content modification using MagicString to inject imports and JSX components.
Sanitization: The documentation specifies that all registry submissions are subject to manual review by TanStack maintainers.
[REMOTE_CODE_EXECUTION]: The documentation describes how the devtools Vite plugin performs automated code generation and injection into user projects based on registry data. This includes inserting imports and wiring plugin components into the TanStackDevtools component's props.
[EXTERNAL_DOWNLOADS]: The marketplace workflow involves the automated installation of plugin packages from the npm registry. The skill correctly identifies these as external dependencies from a well-known public registry.

tanstack-devtools-marketplace