The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends downloading UI components using the shadcn CLI tool (npx shadcn@latest add @coss/<component>). This is a standard practice within the shadcn ecosystem and targets the library's official registry.
[COMMAND_EXECUTION]: Documentation includes commands for installing industry-standard React dependencies, such as @base-ui/react, zod, and react-day-picker, via the npm package manager.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface common to coding assistants, as it processes user requirements to generate implementation code.
Ingestion points: User descriptions of UI tasks and component requirements (SKILL.md).
Boundary markers: None; the skill does not specify delimiters to segregate user input from generated instructions.
Capability inventory: The skill facilitates command execution through suggested npx and npm operations (references/cli.md, references/primitives/*.md).
Sanitization: No explicit sanitization or escaping of user input is documented before it is used in code generation logic.

coss