The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/rebuild-extension.sh executes shell commands including bun run make and rsync. These commands execute build logic and modify the local filesystem by synchronizing files to an application directory.
[INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface where it processes data from a local repository that could contain malicious instructions or scripts.
Ingestion points: The local repository path provided via the --repo flag to the rebuild-extension.sh script.
Boundary markers: Absent. The skill assumes the provided repository is a trusted source.
Capability inventory: The skill can execute arbitrary commands defined in a repository's package.json via bun and overwrite files in an application directory via rsync.
Sanitization: The script performs basic file existence checks (package.json, wxt.config.ts) but does not validate or sanitize the content of the build scripts or the files being copied.
[EXTERNAL_DOWNLOADS]: The build process relies on the bun package manager, which typically downloads dependencies from external registries during the build phase.

canvas-capture-extension