The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The scripts/init-artifact.sh script is vulnerable to indirect prompt injection because it accepts a user-provided project name and incorporates it into shell commands without sanitization.
Ingestion points: The first command-line argument ($1) of scripts/init-artifact.sh, representing the project name, is the entry point for untrusted data.
Boundary markers: The script does not use any boundary markers or instructions to delimit the user-provided data.
Capability inventory: The script possesses capabilities to execute shell commands (pnpm, sed), write to the file system (cat, node -e), and extract local archives (tar).
Sanitization: There is no evidence of sanitization, escaping, or validation of the $PROJECT_NAME variable before its use in shell commands.
[COMMAND_EXECUTION]: The skill uses shell command interpolation that is susceptible to command injection if the user-provided project name contains shell metacharacters.
Evidence: In scripts/init-artifact.sh, the variable $PROJECT_NAME is used in several shell commands. Specifically, on lines 83-84, the variable is placed outside of single quotes during a sed operation ($SED_INPLACE 's/.../'"$PROJECT_NAME"'/...'), which allows the shell to evaluate subshells or backticks contained within the variable before the command executes.
[DYNAMIC_EXECUTION]: The skill performs dynamic code and configuration generation to set up the development environment.
Evidence: scripts/init-artifact.sh uses node -e to programmatically modify tsconfig.json and tsconfig.app.json. It also generates several configuration files (e.g., tailwind.config.js, vite.config.ts, .parcelrc) using cat and heredocs. These actions are standard for development tooling but involve runtime generation of executable-adjacent content.
[EXTERNAL_DOWNLOADS]: The skill installs a large number of dependencies from the official npm registry during initialization and bundling.
Evidence: The scripts execute pnpm install and pnpm add for over 50 packages, including React, Radix UI, Tailwind CSS, and Parcel plugins. These downloads are performed from the standard public registry.

web-artifacts-builder