The Agent Skills Directory

[SAFE]: The skill serves as a high-quality technical documentation suite for PWA development. It provides standard architectural advice, code snippets for web APIs, and implementation patterns.
[EXTERNAL_DOWNLOADS]: Mentions well-known development tools and libraries such as Lighthouse, Workbox, web-push CLI, and Bubblewrap. These are standard industry tools for building and auditing web applications and are referenced neutrally for educational purposes.
[COMMAND_EXECUTION]: Provides example CLI commands for developers to run locally (e.g., npx lighthouse, bubblewrap build). These are informational and do not involve the agent executing arbitrary or dangerous commands.
[CREDENTIALS_UNSAFE]: References to VAPID keys and authentication tokens in code snippets use placeholders like PUBLIC_VAPID_KEY or process.env.VAPID_PRIVATE_KEY, following best practices for environment-based secret management.
[INDIRECT_PROMPT_INJECTION]: While the skill explains how to build PWAs that handle external data (via Share Target or File Handling APIs), these are described in the context of web application development. The skill itself does not ingest untrusted data into the agent's context.

pwa