The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of the Bash tool to automate development tasks. This includes project initialization (git clone, gh repo clone), dependency management (npm install, uv sync), build processes (dotnet build, npm run build), and database operations (sqlcmd, dotnet ef dbcontext scaffold). These operations are consistent with the skill's primary purpose of managing software development projects.
[EXTERNAL_DOWNLOADS]: The skill facilitates the download of project templates and development tools from external sources. It specifically references cloning repositories from the 'SiamsmileDev' GitHub organization (e.g., Net60_ApiTemplate_2023, react-ts-template-2023, and SSD-Python-Starter-Template). It also guides the user through installing global NPM packages like release-it and @release-it/conventional-changelog for version management.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a broad attack surface for indirect prompt injection because it is designed to read, analyze, and modify a wide variety of local project files, including source code (.cs, .py, .tsx), configuration files (.csproj, package.json, appsettings.json), and database scripts (.sql). The agent uses the contents of these files to determine which commands to run (e.g., in the doctor and refactor commands), which could be exploited if an attacker manages to place malicious instructions within a project file that the agent processes.

ssd