The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources such as project configuration files and lockfiles to determine the setup environment and dependencies.
Ingestion points: package.json, pnpm-lock.yaml, yarn.lock, bun.lockb, package-lock.json, and existing linting/formatting configuration files.
Boundary markers: No specific boundary markers or instructions are present to ensure that content from these files is treated as untrusted data during processing.
Capability inventory: The skill possesses the capability to execute shell commands via package managers (npm, pnpm, yarn, bun) and write new configuration files (oxlint.config.ts, oxfmt.config.ts) to the filesystem.
Sanitization: There is no evidence of sanitization or strict schema validation of the ingested project metadata before it is used to drive the installation and configuration logic.
[COMMAND_EXECUTION]: The skill uses various package managers to install dependencies and run verification scripts.
Evidence: Executes npm install, pnpm add, yarn add, and bun add commands based on detected lockfiles, and performs verification using pnpm exec oxlint and pnpm exec oxfmt.

setup-oxlint