The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to run a Node.js script (add-missing-names.mjs) from a companion skill's directory to automate the creation of localization files.
[EXTERNAL_DOWNLOADS]: Fetches and executes the @minecraft/creator-tools package using npx from the official npm registry. This is a vendor-owned resource used for its intended purpose.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: User-provided descriptions for custom mobs (traits, behaviors, names) are used as primary input for generating Minecraft entity files.
Boundary markers: The skill lacks explicit delimiters or warnings to prevent the agent from following instructions embedded within the user's mob description.
Capability inventory: The skill has the ability to write multiple JSON files across a project directory and execute shell commands to finalize the content.
Sanitization: There is no evidence of sanitization for user input before it is used to construct command-line arguments or entity properties.

create-mob