The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the zard-cli tool via package runners such as npx, pnpm dlx, bunx, and yarn to perform project setup (init) and component installation (add). These operations are restricted to the vendor's command scope as defined in the skill configuration.
[EXTERNAL_DOWNLOADS]: The skill retrieves component source code, metadata, and documentation from the vendor's official registry at https://zardui.com/r and documentation site at https://zardui.com/docs/. This is the primary method for providing the agent with up-to-date library information.
[INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests data from external sources, including the component registry and project-level configuration files (components.json). However, the ingestion points target vendor-controlled infrastructure, and the skill includes specific instructions for the agent to validate components against the official documentation before generating code.
[DYNAMIC_EXECUTION]: The zard-mcp server and zard-cli tool are executed dynamically via npx to ensure the assistant has access to the latest tooling without requiring manual installation. These tools are verified against the vendor's naming conventions and official domains.

zard