The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill documents methods for programmatically modifying sensitive native configuration files (such as Xcode's Info.plist and Android's Manifest/Gradle files) based on data ingested from app.json or app.config.js. This creates a surface where an attacker providing a malicious project configuration could potentially influence the native build process.
Ingestion points: Native project settings are derived from the project's app.json or app.config.js files, which are processed by the Config Plugins documented in the skill.
Boundary markers: The provided code patterns do not include specific delimiters or "ignore instructions" warnings when interpolating data from the configuration files into native project structures.
Capability inventory: The skill facilitates the use of powerful modifiers from expo/config-plugins (e.g., withInfoPlist, withAndroidManifest, withAppBuildGradle) which have the authority to modify application permissions, entitlements, and build scripts.
Sanitization: The documentation focuses on functionality and does not explicitly demonstrate input validation or sanitization for values being written to native build files.

mobile-config-plugins