The Agent Skills Directory

[COMMAND_EXECUTION]: The skill facilitates the execution of the shadcn CLI tool (via pnpm dlx) for project initialization, component discovery, and installation. It also defines a project-specific linter script (scripts/check-design-tokens.ts) that is executed using the tsx runner to validate source code against design system constraints. These are standard development tasks within the intended scope of frontend architecture management.
[EXTERNAL_DOWNLOADS]: The skill downloads project dependencies, components, and font assets from well-known and trusted registries, specifically the shadcn registry and the Fontsource collection on npm. These operations are routine for setting up a web application and do not involve untrusted or high-risk remote sources.
[INDIRECT_PROMPT_INJECTION]: The design token validation script (check-design-tokens.ts) reads project source files and reports findings to the console. While this involves processing potentially attacker-controlled code if the repository is compromised, the script's function is limited to static regex-based reporting, posing no significant injection risk to the agent context.

design-system