The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/shadcn_add.py programmatically executes the npx shadcn CLI tool using subprocess.run. The script uses a list-based argument structure instead of a raw shell string, which effectively prevents shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of UI components and development dependencies from the official npm and shadcn/ui registries. These are established, well-known services and the skill's usage is consistent with its primary purpose of UI development.
[SAFE]: The script scripts/tailwind_config_gen.py includes a robust regular expression validator for npm plugin names, ensuring that generated configuration files cannot be used as a vector for malicious code injection via require() statements.
[SAFE]: The .coverage binary file was analyzed and confirmed to be a standard SQLite database generated by the Python coverage tool for tracking test execution. It contains no executable content or obfuscated malicious payloads.
[SAFE]: Skill metadata and reference documentation are transparent and consistent with the provided utility scripts and overall functionality.

ckm-ui-styling