The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill uses npx to download and execute the @nocobase/app-installer package at runtime from a vendor-specific registry.
[COMMAND_EXECUTION]: The skill instructions direct the agent to execute various shell commands for installing, upgrading, and checking the application status.
[PRIVILEGE_ESCALATION]: The skill mentions procedures that may require elevated privileges, such as installing packages globally (npm install -g pm2) and running service commands (pm2 startup), though it explicitly advises seeking user permission before performing these actions.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data that could potentially be influenced by an attacker if the source is compromised.
Ingestion points: Reads installer.json, config.yml, app.env, and deployment archives (.tar.gz), and processes JSON output from the installer tool.
Boundary markers: None explicitly defined for the data processed.
Capability inventory: Full shell command execution via npx, extensive file system write access for deployments, and persistence management via pm2.
Sanitization: Not explicitly detailed for the ingested data or JSON responses.
[PERSISTENCE]: The skill configures the application to run under the pm2 process manager and instructs the agent on how to use pm2 startup to ensure the application restarts automatically after system reboots.
[EXTERNAL_DOWNLOADS]: The skill fetches the installer package and hub templates from the vendor's official registry at https://npm.nocobase.ai.

nocobase-app-installer