The Agent Skills Directory

[COMMAND_EXECUTION]: The skill extensively uses the Bash tool and CLI utilities like ast-grep to perform repository modifications, file scaffolding, and automated code refactoring. These operations are essential for the skill's purpose but involve high-privilege access to the filesystem.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it processes external, potentially untrusted data.
Ingestion points: The skill ingests user-supplied Figma URLs and reads existing source code files from the project directory to use as references for code generation.
Boundary markers: There are no defined boundary markers or instructions for the agent to ignore or sanitize embedded instructions within the Figma metadata or the component source code being processed.
Capability inventory: The skill has access to Bash, Write, and Edit tools, allowing it to execute commands and modify any file in the project based on the interpreted input.
Sanitization: The skill lacks explicit sanitization or validation steps for the content parsed from Figma URLs or existing component files before it is used to influence the agent's output.

sb-explore