The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides instructions for tools that ingest untrusted data from external sources.
Ingestion points: ofetch fetches data from APIs, unpdf parses PDF files, confbox parses configuration files (YAML/TOML), and h3/nitro handle incoming HTTP requests (references/features-ofetch.md, references/features-unpdf.md, references/features-confbox.md, references/core-h3.md).
Boundary markers: The documentation does not explicitly detail the use of boundary markers or instructions to ignore embedded commands in the processed data.
Capability inventory: The ecosystem includes capabilities for file writing (unstorage, fs-memo), network operations (ofetch, untun), package management (nypm), and code generation (knitwork-x, magicast).
Sanitization: Basic parsing is provided by the libraries, but application-level sanitization is not detailed in the skill examples.
[COMMAND_EXECUTION]: The skill documents tools capable of executing system commands and managing processes.
Evidence: nypm is used for installing and running packages via npm, pnpm, yarn, or bun (references/features-nypm.md). citty is used to build CLI applications with type-safe commands (references/features-citty.md).
[EXTERNAL_DOWNLOADS]: The skill references tools that download content from remote repositories.
Evidence: giget is documented for downloading templates and git repositories from sources like GitHub, GitLab, and Bitbucket (references/features-giget.md).
[DYNAMIC_EXECUTION]: The skill includes utilities for runtime code compilation and execution.
Evidence: jiti provides runtime TypeScript and ESM support (references/features-jiti.md). bundle-runner runs webpack bundles with optional VM sandboxing (references/features-bundle-runner.md). magicast and knitwork-x are used to programmatically generate or modify source code (references/features-magicast.md, references/features-knitwork.md).

unjs