The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses npx create-twenty-app@latest to bootstrap new projects. This involves executing a remote package from the NPM registry, which is the primary and expected function of a scaffolding skill.
[INDIRECT_PROMPT_INJECTION]: The skill takes user input (such as application names, display names, and descriptions) and interpolates them into shell commands. To mitigate command injection risks, the instructions explicitly require the agent to sanitize the directory name by transforming it to lowercase and replacing spaces with hyphens.
[EXTERNAL_DOWNLOADS]: The skill downloads the create-twenty-app package during execution. It also references the official Docker Desktop download page (https://www.docker.com/products/docker-desktop/) as a fallback for users needing a local environment. These resources are either vendor-owned or from well-known services.
[CREDENTIALS_UNSAFE]: The skill documents that the tool stores OAuth credentials in a local configuration file at ~/.twenty/config.json. This is standard behavior for the development tool and the skill does not include instructions to read or exfiltrate this sensitive file.

create-app