The Agent Skills Directory

EXTERNAL_DOWNLOADS (SAFE): The init-motion.sh script facilitates the installation of the motion or framer-motion libraries via standard package managers (npm, pnpm, yarn). These are well-known, trusted packages from the official registry.
COMMAND_EXECUTION (SAFE): Shell scripts are used for project initialization and code generation (scaffolding). The scripts use mkdir and cat to create a standard directory structure and provide template components. No arbitrary or high-risk command execution was detected.
DATA_EXFILTRATION (SAFE): The scripts do not access sensitive file paths (like credentials or SSH keys) or perform network requests to non-whitelisted domains.
PROMPT_INJECTION (SAFE): The provided documentation and React templates contain standard instructional content and code examples. There are no attempts to override agent instructions or bypass safety filters.
INDIRECT PROMPT INJECTION (LOW):
Ingestion points: The script reads the local package.json file using grep to detect project frameworks.
Boundary markers: None present, as it is a shell script environment.
Capability inventory: Directory creation (mkdir), file writing (cat), and package installation (npm/yarn/pnpm).
Sanitization: The script only checks for the presence of specific framework strings ("next", "vite") and does not execute the contents of the file directly.

motion