The Agent Skills Directory

[COMMAND_EXECUTION]: The hook script hooks/scripts/slds_linter_wrapper.py uses subprocess.run to call the official Salesforce SLDS linter (@salesforce-ux/slds-linter) via npx. This is used to provide diagnostic feedback during the development process and is implemented using standard, safe practices for shell command execution within a validation hook.
[INDIRECT_PROMPT_INJECTION]: The skill implements extensive static analysis via template_validator.py and validate_slds.py to check user-provided LWC code for anti-patterns and accessibility issues. While this processes untrusted data, the analysis is performed using regex and structured checks, with the output returned as text-based diagnostics, presenting no significant vulnerability surface.
[EXTERNAL_DOWNLOADS]: The skill's documentation and reference guides provide instructions for installing well-known, official Salesforce development and testing packages (e.g., @salesforce/sfdx-lwc-jest, @salesforce/lightning-types) from the standard npm registry.

sf-lwc