The Agent Skills Directory

[DYNAMIC_EXECUTION]: The framework utilizes runtime compilation for browser assets and a supervised runner for development HMR, which are standard features for modern web development environments.\n
Evidence: references/assets-and-browser-modules.md describes createAssetServer for source-served modules that require compilation and import rewriting.\n
Evidence: references/middleware-and-server.md details a development HMR runner using run('./server.ts', ...) to supervise the application server.\n- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data from HTTP requests (FormData, query parameters), which is a common attack surface for web frameworks.\n
Ingestion points: The skill ingests untrusted data via request.formData(), get(FormData), and params within controller actions (e.g., in app/actions/controller.tsx).\n
Boundary markers: The documentation prescribes strict schema validation using the remix/data-schema library as a boundary for all data crossing trust boundaries.\n
Capability inventory: Handlers have access to database operations (remix/data-table), file storage, and network proxying.\n
Sanitization: All UI rendering is performed using JSX or escaped HTML templates, protecting against common injection attacks.\n- [EXTERNAL_DOWNLOADS]: The framework depends on the remix npm package as its core foundation.\n
Evidence: SKILL.md identifies the remix package as the single source for all framework subpath imports.

remix