The Agent Skills Directory

[SAFE]: The skill defines a clear, manual-guided process for converting source code between two known platforms using documented mapping rules. It does not automate any background tasks that would circumvent user awareness.
[COMMAND_EXECUTION]: The instructions suggest the use of standard development commands like npm install and npx @dcloudio/uvm. These tools are part of the official uni-app ecosystem and are used for routine project initialization and maintenance.
[DATA_EXPOSURE]: To function, the skill needs to read project metadata such as appid from project.config.json. This access is scoped to the project being converted and is required for proper target project configuration.
[INDIRECT_PROMPT_INJECTION]: As the skill processes user-supplied source code (WXML, JS, WXSS), it is theoretically susceptible to indirect prompt injection if those files contain malicious instructions in comments. However, the transformation process is focused on syntax mapping, which naturally limits the agent's likelihood of executing arbitrary instructions from the data.

wmp-to-uniapp