The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches audit standards and configuration files from the vendor's official GitHub repository at https://raw.githubusercontent.com/somnio-software/somnio-ai-tools/main/agent-rules/rules/angular/. This is a standard vendor resource used to provide the agent with current auditing rules.- [INDIRECT_PROMPT_INJECTION]: Because the skill reads and analyzes project source code (TypeScript, HTML, SCSS), it has an inherent attack surface for indirect prompt injection. Malicious instructions embedded in comments or strings within the audited code could attempt to override the auditor's behavior or findings.
Ingestion points: Source files in src/app/ and project configuration files like tsconfig.json.
Capability inventory: The skill has access to Read, Write, Bash, Grep, and Glob tools.
Sanitization: There is no specific evidence of sanitization of the ingested code content before it is processed by the agent.- [COMMAND_EXECUTION]: The skill uses bash to automate directory traversal and calculate metrics (e.g., using find and wc -l). It also uses a shell script to dynamically generate report filenames based on the git repository name. These operations are restricted to the audit context and do not attempt to access sensitive system areas.

angular-best-practices