The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a utility script scripts/check-versions.sh that executes the npm CLI locally to check the versions of installed dependencies.
[EXTERNAL_DOWNLOADS]: The scripts/check-versions.sh script performs network requests to the npm registry via npm view to compare local package versions with the latest available versions.
[INDIRECT_PROMPT_INJECTION]: The React templates provided by the skill are designed to ingest and render data streamed from external AI models, creating a vulnerability surface inherent to chat interfaces.
Ingestion points: AI-generated message content processed by the useChat, useCompletion, and useAssistant hooks across multiple templates like use-chat-basic.tsx and nextjs-chat-app-router.tsx.
Boundary markers: No explicit instruction-ignoring delimiters are implemented in the UI logic of the templates.
Capability inventory: The templates focus on UI state management and display; executable logic (tools, file handling) is defined in server-side API routes as seen in nextjs-api-route.ts.
Sanitization: The custom-message-renderer.tsx template provides a secure rendering pattern using ReactMarkdown to sanitize and display markdown and code blocks returned by the AI model.

ai-sdk-ui