The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill instructions in SKILL.md direct the execution of npx --yes serve-sim@latest, which downloads and runs code from an external package registry. This package is not from a verified or well-known source.
[EXTERNAL_DOWNLOADS]: The Xcode project generator in scripts/lib/xcode-project.mjs incorporates a remote dependency from https://github.com/EmergeTools/SnapshotPreviews-iOS.git that is fetched and linked during the build process.
[COMMAND_EXECUTION]: The script scripts/swiftui-preview-browser.mjs invokes multiple system utilities including xcodebuild, xcrun, and swift. Additionally, the Swift template scripts/templates/FocusedPreviewApp.swift utilizes dlopen and dlsym to dynamically load and execute code from compiled libraries at runtime.
[PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes local source files and manifests to generate build configurations.
Ingestion points: Package.swift and project source files accessed during the build and watch process.
Boundary markers: Absent in the instructions for processing external package content.
Capability inventory: Shell command execution via xcodebuild and xcrun, filesystem writes, and dynamic library loading.
Sanitization: Employs JSON.stringify for some values but lacks validation for logic contained within the user-controlled source files.

ios-simulator-browser