The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes official and vendor-related tools via npm and npx, including eas-cli, testflight, and submit-expo-feedback. These downloads originate from the public npm registry and are standard components of the author's development workflow.
[COMMAND_EXECUTION]: The skill provides instructions for executing various CLI commands to manage builds, credentials, and store submissions. These commands, such as eas build and eas submit, are the primary function of the skill and operate within the expected scope of the EAS service.
[DYNAMIC_EXECUTION]: In references/app-store-metadata.md, the skill describes using a JavaScript-based configuration (store.config.js) which allows for runtime logic, such as fetching metadata from a remote API. While this involves executing external data, it is presented as a legitimate customization feature for developers.
[INDIRECT_PROMPT_INJECTION]: The skill includes a feedback mechanism in SKILL.md that incorporates user-provided text into a command-line execution.
Ingestion points: User-supplied feedback string provided to the submit-expo-feedback command in SKILL.md.
Boundary markers: The feedback content is enclosed in double quotes.
Capability inventory: Execution of the submit-expo-feedback tool via npx.
Sanitization: The skill does not explicitly detail sanitization, relying on the underlying tool to handle the input safely.

eas-app-stores