The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses npx -y solvapay@latest init to initialize project configuration and set up environment variables. This is a standard initialization pattern for the vendor's tooling.
[EXTERNAL_DOWNLOADS]: The skill instructs the user to install several Node.js packages from the npm registry, including @solvapay/next, @solvapay/react, @solvapay/react-supabase, @solvapay/server, and @supabase/supabase-js. These are official SDKs from the vendor or well-known services.
[REMOTE_CODE_EXECUTION]: The initialization process involves downloading and executing the solvapay CLI tool via npx. This is an intended behavior for setting up the developer environment.
[PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection as it handles external data in its integration examples.
Ingestion points: API routes in references/nextjs.md and references/react.md ingest data such as product and plan references via request bodies.
Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the provided templates.
Capability inventory: The skill environment allows for command execution (npx in SKILL.md) and network API calls to external services.
Sanitization: The provided code skeletons do not demonstrate input validation or sanitization, which is expected in simplified documentation examples but represents a theoretical risk.

website-checkout