The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs users to install dependencies from the npm registry, including rolldown, @rollup/plugin-node-resolve, and @rollup/plugin-commonjs. These are standard development tools and are fetched from a well-known service.
[COMMAND_EXECUTION]: The skill utilizes npx rolldown to execute the bundling process. This is the primary intended function of the skill and represents standard usage of a build tool.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data (source code and configuration files) which could potentially contain malicious instructions, though this is a common risk for all development tools.
Ingestion points: Reads local project files including rolldown.config.js and src/index.ts in SKILL.md.
Boundary markers: None identified in the instruction set.
Capability inventory: Includes package installation (npm install) and command execution (npx rolldown).
Sanitization: No explicit sanitization of configuration inputs or source code content is performed within the skill instructions.

rolldown