The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides instructions for Vite's build and plugin APIs, which are designed to process and transform external source files (HTML, JavaScript, and CSS). While this is the intended functionality of a build tool, it represents a standard indirect injection surface where malicious code in a project could attempt to influence the agent's behavior during transformation tasks.
Ingestion points: Documentation in references/core-plugin-api.md and references/build-and-ssr.md describes hooks like transformIndexHtml and transform(code, id) that process file content from the project directory.
Boundary markers: The skill does not explicitly define markers or warnings to disregard instructions potentially embedded in the source code being processed.
Capability inventory: The skill documents Vite's JavaScript API (e.g., build, createServer, preview in references/build-and-ssr.md), which allows the agent to perform file system operations and execute transformation logic within the Node.js environment.
Sanitization: The skill relies on the default security model of Vite and the underlying Node.js runtime for handling external content during the build process.

vite