The Agent Skills Directory

[Indirect Prompt Injection Surface]: The skill instructs the agent to read and follow instructions from an external file (node_modules/@microsoft/webui/ai.md). While this is standard practice for accessing package-specific guidance, the agent's behavior could be influenced by the content of that external file. However, this is used within the intended scope of providing version-specific coding standards.
[Vendor Resource Reference]: The skill references the @microsoft/webui package, which is a resource provided by the skill's author. Using local documentation from a vendor's own library is a standard development workflow and does not involve external network requests or unauthorized file access.

webui-reference