The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: TypeScript code examples for getAffectedPackages and scaffoldService demonstrate shell command execution using child_process.execSync with direct string interpolation of variables.
Evidence: execSync(npx nx show projects --affected --base=${base} --json, ...) in SKILL.md.
Evidence: execSync(cp -r templates/${opts.type}/. ${serviceDir}/) in SKILL.md.
Risk: This pattern is vulnerable to command injection if parameters like base, opts.type, or opts.name contain unsanitized input from external or user-provided sources.
[EXTERNAL_DOWNLOADS]: The skill documentation and examples reference external resources and registries for development tools.
Evidence: References Dev Container features from ghcr.io for Node.js and Docker-in-Docker.
Evidence: References GitHub Actions including actions/checkout, actions/setup-node, and codecov/codecov-action.
Context: These references target well-known technology providers and trusted organizations for standard development workflows.

developer-experience-patterns