The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs numerous well-known development dependencies from the NPM registry, such as Vite, Tailwind CSS, Parcel, and the Radix UI component library. These are standard tools for modern web development and their inclusion is consistent with the skill's primary purpose.
[COMMAND_EXECUTION]: Local shell scripts (init-artifact.sh, bundle-artifact.sh) automate project initialization and asset bundling. These scripts perform routine file system operations, like creating directories and configuration files, and execute standard build commands using pnpm and parcel.
[DYNAMIC_EXECUTION]: The initialization script uses node -e to programmatically update tsconfig.json files during setup. This is a common and safe method for scaffolding tools to correctly configure project path aliases without manual intervention.
[INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection because it processes and bundles user-authored project source code (e.g., in bundle-artifact.sh where it reads index.html).
Ingestion points: The bundling process reads local project source files to produce the final single-file HTML artifact.
Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore instructions embedded within the processed code.
Capability inventory: The skill utilizes shell commands (bash), package managers (pnpm), and Node.js for its operations.
Sanitization: No specific filtering or sanitization is performed on the source code before it is bundled, which is expected for a development tool.

web-artifacts-builder