The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The documentation and setup guides reference official and widely used packages from the NPM registry, such as next, turbo, react, and remixicon. It also utilizes standard bootstrapping commands like npx create-next-app and npx create-turbo to pull latest project templates from trusted sources.
[COMMAND_EXECUTION]: The skill includes Python scripts (nextjs_init.py and turborepo_migrate.py) that perform local file system operations to automate project initialization and monorepo migration. These scripts use standard library functions for directory creation and file writing.
[DATA_EXPOSURE]: A binary coverage data file (scripts/.coverage) is included. Analysis shows it is a standard SQLite database produced by coverage.py. While it contains absolute file paths from the original development environment, it does not leak any credentials, secrets, or sensitive user data.
[INDIRECT_PROMPT_INJECTION]: The utility scripts process user-provided strings (e.g., project names) to populate templates. The nextjs_init.py script mitigates potential injection risks by validating that project names contain only alphanumeric characters, hyphens, and underscores.

nextjs-turborepo