The Agent Skills Directory

External Package Installation: The skill installs the @microsoft/managed-apps-cli package from the public npm registry to provide the necessary command-line interface. While this involves downloading external code, the package is a verified resource from a trusted organization.
Automated Shell Operations: The skill utilizes shell commands to manage authentication states, initialize Git repositories, and orchestrate the local build process. These operations are standard for development orchestration and are used to provide a seamless scaffolding experience.
Indirect Prompt Injection Surface: The skill processes user-provided application descriptions to generate source code and configurations. This pattern creates a surface for indirect prompt injection where untrusted input could influence the generated output. This is a known consideration for automated code generation tools and is mitigated by the local, user-reviewed nature of the generated project.
Local Execution and Verification: The skill emphasizes running the application on a local development server before any cloud deployment occurs, allowing the user to review the generated code and behavior in a controlled environment.

create-app