The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill guides users to install various framework adapters and plugins from the npm registry (e.g., @netlify/vite-plugin, @sveltejs/adapter-netlify). These packages are from established ecosystem providers or the vendor itself.
[COMMAND_EXECUTION]: Instructions include routine development and deployment commands like npm run build, npx astro add netlify, and netlify dev, which are standard for the skill's intended purpose.
[REMOTE_CODE_EXECUTION]: The Hydrogen documentation references a project template hosted on GitHub (https://github.com/netlify/hydrogen-template) for use with the npm create command. This is a common and legitimate practice for framework scaffolding from a trusted source.
[PROMPT_INJECTION]: The skill features an 'Anti-Patterns' section and a 'Verification Protocol' that explicitly warn the agent against treating external tool outputs or logs as trusted instructions, effectively hardening the agent against malicious overrides.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with project configuration files (e.g., netlify.toml, package.json), which is a common pattern for framework tools. The inclusion of defensive instructions for the agent mitigates the inherent risks associated with processing untrusted project data.

netlify-frameworks