The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses various command-line interfaces (CLIs) to manage infrastructure and code, including git, gh, cf, and npx. These are used for their intended purposes such as authentication checks, project scaffolding, and deployment.
[EXTERNAL_DOWNLOADS]: The skill utilizes npx to execute tools like convex and lumail from the npm registry. These are well-known developer tools and registries.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill explicitly instructs the agent to never print, commit, or log secrets. It mandates storing sensitive information only in appropriate environment files (.env.local) or platform-specific secret managers (Cloudflare secrets, Convex env), which is a recommended security practice.
[INDIRECT_PROMPT_INJECTION]: The skill includes steps to run an audit-safety skill on authentication and payment areas before going live, indicating a design focused on verifying the security of the generated application.

personal-saas