The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The assets/starter/package-lock.json file contains references to multiple package versions that do not exist in the official NPM registry for those software products. Examples include typescript@7.0.2 (official stable is 5.x), vite@8.3.3 (official stable is 6.x), rolldown@1.2.13 (official versions are 0.x), and nanoid@3.3.20 (official latest in the 3.x branch is 3.3.8).
[COMMAND_EXECUTION]: The SKILL.md file explicitly instructs users to execute npm ci and npm run build after scaffolding a new project. These commands are high-risk because they trigger the installation and execution of the aforementioned suspicious packages.
[REMOTE_CODE_EXECUTION]: The use of a poisoned package-lock.json allows for arbitrary code execution during both the installation phase (via package install hooks) and the build phase (via replaced binaries like tsc or vite). The architecture-specific binary structure observed in the typescript entry of the lockfile is uncharacteristic of the official TypeScript package and indicates a handcrafted malicious or deceptive dependency.

threejs-game-runtime