The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute system commands for environment discovery, authentication state checking, and workflow management.
Evidence: The skill executes commands such as xano --version, xano profile token, xano profile me, xano workspace:list, and various xano sandbox commands to verify the local environment and interact with the Xano platform.
[EXTERNAL_DOWNLOADS]: The skill interacts with the npm registry to check for package updates and provides instructions or commands to install or update the @xano/cli and @xano/developer-mcp packages.
Evidence: Use of npm view to fetch version metadata and commands like npm install -g @xano/cli and npx -y @xano/developer-mcp to manage vendor-provided tools.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources including Xano API responses (workspace metadata, branch lists) and local project files (XanoScript .xs files, CLAUDE.md) which are used to generate playbooks and status reports.
Ingestion points: The skill reads output from xano workspace:list, xano profile me, and inspects local .xs files.
Boundary markers: The skill uses structured markdown templates for the playbook but does not explicitly mention sanitization of external metadata.
Capability inventory: The skill has access to Bash for command execution and Write for creating files.
Sanitization: No explicit sanitization of workspace names or branch names is mentioned before they are interpolated into the generated playbook or CLAUDE.md updates.

xano-init