The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute various Angular CLI and system commands (ng new, ng build, npx, etc.) to manage projects, dependencies, and testing.
[EXTERNAL_DOWNLOADS]: The skill uses npm and npx to fetch and install packages from the NPM registry, including standard Angular libraries and third-party tools like Tailwind CSS and Cypress.
[INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it incorporates user-supplied data (such as a requested Angular version) directly into shell commands (npx @angular/cli@<requested_version>). * Ingestion points: User-provided version string and project name in SKILL.md. * Boundary markers: Absent. * Capability inventory: Shell command execution via npx and ng in SKILL.md. * Sanitization: Absent; the skill does not instruct the agent to validate or sanitize these inputs before command execution.

angular-developer