The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/integration_doctor.mjs script executes pushy version and cresc version using child_process.spawnSync to verify the presence of necessary CLI tools on the host system.
[INDIRECT_PROMPT_INJECTION]: The skill processes metaInfo metadata from an external update server to implement rollout gates (e.g., in references/rollout-whitelist.ts). This represents a potential indirect injection surface where external data influences application flow.
Ingestion points: metaInfo string from the update client response, utilized in SKILL.md and references/rollout-whitelist.ts.
Boundary markers: The skill instructs the agent to treat metaInfo as unknown and recommends JSON shape validation.
Capability inventory: The skill provides capabilities to downloadUpdate and switchVersion, which can restart the app and apply new code.
Sanitization: The skill provides a reference implementation (isUserAllowed in references/rollout-whitelist.ts) that strictly validates the metadata structure before use.
[EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the react-native-update-cli globally via NPM. This is a standard requirement for the service provided by the skill author (reactnativecn).

react-native-update