The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/shadcn_add.py executes the npx shadcn command using subprocess.run to install UI components. The arguments are passed as a list, which is a standard security measure to prevent shell injection.
[EXTERNAL_DOWNLOADS]: The skill documentation and scripts utilize npx and npm to fetch component libraries and styling utilities from the npm registry. These are standard operations for frontend development with well-known services.
[COMMAND_EXECUTION]: The test suite in scripts/tests/test_tailwind_config_gen.py executes the node --check command to validate the syntax of generated configuration files.
[SAFE]: The script scripts/tailwind_config_gen.py implements a restrictive regular expression (_VALID_PLUGIN_NAME) to sanitize package names before they are used in generated code, effectively mitigating code injection risks in the produced tailwind.config.js/ts files.
[SAFE]: The project includes a standard binary coverage database (scripts/.coverage) and multiple font license files under the SIL Open Font License, all of which are appropriate for a design-oriented developer skill.

ui-styling