The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes npx knip and npm install for project maintenance tasks. It includes the use of flags like --fix and --allow-remove-files to automate code modification and file deletion, which are standard operations for the tool's intended purpose of code cleanup.
[REMOTE_CODE_EXECUTION]: The skill facilitates downloading and running the knip package from the Node.js package registry via npx. Knip is a well-known and widely used tool for dead code analysis in the JavaScript ecosystem.
[INDIRECT_PROMPT_INJECTION]: The skill analyzes project source code and configuration files to identify unused exports. Evidence Chain: (1) Ingestion: Project source files (JS, TS) and configuration files (JSON). (2) Boundaries: The skill provides specific guidelines for 'Ask first' scenarios and follows a 'configuration-first' workflow. (3) Capabilities: Automated file modification and deletion. (4) Sanitization: The skill relies on Knip's static analysis logic and mandates human verification for ambiguous or sensitive cleanup targets, mitigating the risk of data-driven malicious actions.

knip