The Agent Skills Directory

[SAFE]: The skill serves as an implementation guide and acceptance baseline for frontend projects. It provides clear technical constraints and quality gates without introducing any malicious instructions or hidden behaviors.
[SAFE]: Security review procedures are explicitly mandated in references/review.md. The guidelines require verification that no accidental secret exposure occurs through client environment variables and that all untrusted URL or file inputs are validated before use.
[SAFE]: In references/runtime-and-data.md, the documentation provides proactive security guidance regarding Vite's server.allowedHosts configuration. It explains the risks of DNS-rebinding attacks (referencing GHSA-vg6x-rcgg-rjx6) and provides recommendations for secure configuration based on different deployment scenarios.
[COMMAND_EXECUTION]: The skill includes standard development command examples (e.g., bun install, bun run build, bunx nsl run vite). These are routine commands for a React/Vite development environment and are not used for malicious persistence or privilege escalation.
[EXTERNAL_DOWNLOADS]: The skill references several widely-used open-source packages and tools, such as the TanStack ecosystem, Tailwind CSS, shadcn/ui, and Vitest. These are standard industry dependencies for the specified tech stack.

pma-web