The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill documents the installation and use of standard Node.js packages, including sails-hook-shipwright and framework-specific plugins like @rsbuild/plugin-react. These are official resources from the vendor 'sailscastshq' and other well-known organizations.
[COMMAND_EXECUTION]: Instructions include standard development scripts such as npm run dev and npm start. These are intended for local development and production build management within the Sails.js framework.
[INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface where external data is passed to the frontend via the Inertia.js page object in views/app.ejs.
Ingestion points: The views/app.ejs template renders a JSON-stringified page object.
Boundary markers: Data is delimited by standard JSON serialization.
Capability inventory: The skill allows for frontend asset manipulation, dev server execution, and build output generation in the .tmp/ directory.
Sanitization: The use of JSON.stringify() provides basic sanitization for the embedded data during the initial server render.

shipwright