The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill integrates with well-known services including the npm registry, Figma API, GitHub API, and documentation platforms like Storybook, Zeroheight, and Supernova. These downloads are performed to gather component metadata and usage statistics as part of the primary audit function.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources (documentation and source code) to generate its reports. This represents a data ingestion surface; however, the instructions focus on structural analysis and inventory gathering without executing content from these sources.
[COMMAND_EXECUTION]: The skill uses allowed bash tools (cat, find, npm view) to inspect the local filesystem and package registry metadata. These operations are restricted to the audit context and are necessary for the skill's functionality.

component-audit