The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npx storybook ai setup to defer the core installation to the official Storybook CLI tool.
[EXTERNAL_DOWNLOADS]: Installs various official and well-known development dependencies from the npm registry, including @storybook/addon-a11y, @storybook/addon-docs, msw-storybook-addon, and mockdate.
[EXTERNAL_DOWNLOADS]: References official GitHub repositories for the Storybook project to fetch updated setup prompts and documentation using the GitHub CLI (gh api).
[COMMAND_EXECUTION]: Executes a provided Python script (discover-runtime.py) that performs static analysis of the local codebase to identify providers, global CSS, and portal targets. The script operates locally and writes its findings to the .storybook/ directory.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local data by scanning the project's source code, package.json, and index.html to generate Storybook configurations and stories. While this is an ingestion surface for indirect prompt injection, it is a necessary functional component of the discovery process.
Ingestion points: Project source files (.tsx, .jsx, .ts, .js), package.json, and index.html are read by the discovery script and grepped by setup instructions.
Boundary markers: No specific delimiters or warnings for embedded instructions are present in the processing flow.
Capability inventory: The agent has access to Bash, Write, and Edit tools; it can execute package installation and write new story files.
Sanitization: No explicit sanitization or filtering of external code content is performed before interpolation into configuration tasks.

sb-setup