The Agent Skills Directory

[COMMAND_EXECUTION]: The skill constructs shell commands by interpolating user-controlled values like project names and network types, such as in npx create-aptos-dapp <project-name>. This presents a command injection vulnerability if the inputs are not sanitized to remove shell metacharacters.
[EXTERNAL_DOWNLOADS]: The skill utilizes npx to download and execute the create-aptos-dapp package from the NPM registry, representing a runtime dependency on untrusted third-party code. It also references geomi.dev, a vendor-specific resource for author 'iskysun96'.
[PROMPT_INJECTION]: The skill uses the metadata field priority: critical to attempt to influence the agent's task prioritization logic, which is a form of metadata poisoning/instructional override.

create-aptos-project