The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npx -y impeccable@3.6.1 to fetch and execute the Impeccable UI auditing tool from the official npm registry. This is a standard practice for development tools but involves remote code acquisition.
[COMMAND_EXECUTION]: The scripts/fe-gate.sh script orchestrates the audit process by invoking shell commands, including npx, python3, and node. These commands are used to run the included helper scripts and external auditing tools on local project files.
[DYNAMIC_EXECUTION]: The skill performs dynamic execution in two places: scripts/fe-gate.sh uses node -e to process JSON output from the audit tool, and scripts/viewport-check.mjs uses Playwright's evaluate method to execute JavaScript within a headless browser context to detect layout issues.
[INDIRECT_PROMPT_INJECTION]: The skill ingests design information from external URLs and local documentation (Route B and C in references/intake.md). While this provides a surface for indirect prompt injection if the source content contains malicious instructions, the skill uses specific regex-based extraction (design-sync.py) and focuses on technical design tokens, which minimizes the risk in the context of its primary UI auditing purpose.

prd-grade-fe