Skills angular-new-app
📦

angular-new-app

v1.0 Content revision r1 Safe ⚙️ External commands🌐 Network access

Create Modern Angular Applications

Starting an Angular project requires many setup decisions and repeated CLI steps. This skill guides consistent scaffolding, generation, builds, AI configuration, and Tailwind setup.

Supports: Claude Codex Code(CC)
📊 76 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "angular-new-app" from https://skillstore.io/skills/angular-angular-new-app.md and its manifest at https://skillstore.io/api/skills/angular-angular-new-app/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/angular-angular-new-app.md Signed manifest GET /api/skills/angular-angular-new-app/manifest Signed lockfile GET /api/skills/angular-angular-new-app/lockfile

Test it

Using "angular-new-app". Create a customer portal with routing, SCSS, and authentication placeholders.

Expected outcome:

A new Angular workspace with routing, SCSS, generated portal pages, authentication services and guards, tests, and a successful build check.

Using "angular-new-app". Build an SSR product catalog and add Tailwind CSS.

Expected outcome:

An Angular application configured for server-side rendering, catalog routes, generated data services, Tailwind styling, accessible navigation, and verified compilation.

Using "angular-new-app". Set up a small dashboard without skipping tests.

Expected outcome:

A tested Angular dashboard scaffold with generated components, services, routing, selected styles, and build validation before server startup.

Security Audit

Safe
v1 • 9/22/2026 Open versioned report

Most static findings mistake Markdown code spans for Ruby execution or treat fixed Angular CLI commands as unsafe. Dynamic app, prefix, and artifact names remain a medium-risk command-injection concern because the skill does not require validation or argument-safe execution.

1
Files scanned
63
Lines analyzed
12
Review items
0
False positives ignored
Capability review items (12)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
SKILL.md:29
Ruby/shell backtick execution
`npx ng new <app-name> [list of flags based on the description of the app] --interactive=false --ai-
The instructed command interpolates an app name and flag list derived from the user prompt. Without validation or argument-safe execution, shell metacharacters could cause command injection.
Medium
SKILL.md:39
Ruby/shell backtick execution
- `--prefix=<prefix>` — component selector prefix
The documented prefix option accepts a substituted value that may originate from the user. The skill does not require validation or safe argument handling before command execution.
Medium
SKILL.md:45
Ruby/shell backtick execution
- To generate components, use the Angular CLI `npx ng generate component <component-name>`
The component name placeholder may be populated from user input and passed to a shell command. The instruction lacks validation and argument-safe execution requirements.
Medium
SKILL.md:46
Ruby/shell backtick execution
- To generate services, use the Angular CLI `npx ng generate service <service-name>`
The service name placeholder may be populated from user input and passed to a shell command. The instruction lacks validation and argument-safe execution requirements.
Medium
SKILL.md:47
Ruby/shell backtick execution
- To generate pipes, use the Angular CLI `npx ng generate pipe <pipe-name>`
The pipe name placeholder may be populated from user input and passed to a shell command. The instruction lacks validation and argument-safe execution requirements.
Medium
SKILL.md:48
Ruby/shell backtick execution
- To generate directives, use the Angular CLI `npx ng generate directive <directive-name>`
The directive name placeholder may be populated from user input and passed to a shell command. The instruction lacks validation and argument-safe execution requirements.
Medium
SKILL.md:49
Ruby/shell backtick execution
- To generate interfaces, use the Angular CLI `npx ng generate interface <interface-name>`
The interface name placeholder may be populated from user input and passed to a shell command. The instruction lacks validation and argument-safe execution requirements.
Medium
SKILL.md:50
Ruby/shell backtick execution
- To generate guards, use the Angular CLI `npx ng generate guard <guard-name>`
The guard name placeholder may be populated from user input and passed to a shell command. The instruction lacks validation and argument-safe execution requirements.
Medium
SKILL.md:51
Ruby/shell backtick execution
- To generate interceptors, use the Angular CLI `npx ng generate interceptor <interceptor-name>`
The interceptor name placeholder may be populated from user input and passed to a shell command. The instruction lacks validation and argument-safe execution requirements.
Medium
SKILL.md:52
Ruby/shell backtick execution
- To generate resolvers, use the Angular CLI `npx ng generate resolver <resolver-name>`
The resolver name placeholder may be populated from user input and passed to a shell command. The instruction lacks validation and argument-safe execution requirements.
Medium
SKILL.md:53
Ruby/shell backtick execution
- To generate enums, use the Angular CLI `npx ng generate enum <enum-name>`
The enum name placeholder may be populated from user input and passed to a shell command. The instruction lacks validation and argument-safe execution requirements.
Medium
SKILL.md:54
Ruby/shell backtick execution
- To generate classes, use the Angular CLI `npx ng generate class <class-name>`
The class name placeholder may be populated from user input and passed to a shell command. The instruction lacks validation and argument-safe execution requirements.

Risk Factors

⚙️ External commands (25)
SKILL.md:18 SKILL.md:19 SKILL.md:23 SKILL.md:25 SKILL.md:29 SKILL.md:31 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40 SKILL.md:42 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:54 SKILL.md:60 SKILL.md:62 SKILL.md:19
🌐 Network access (1)
SKILL.md:60
Audited by: codex
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/angular-angular-new-app/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/angular-angular-new-app/security.svg)](https://skillstore.io/skills/angular-angular-new-app?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/angular-angular-new-app?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/angular-angular-new-app/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/angular-angular-new-app.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

angular. (2026). angular-new-app security audit report (audit version 1) [Author version 1.0]. Skillstore. https://skillstore.io/skills/angular-angular-new-app/audits/1

BibTeX citation

@techreport{angular-angular-angular-new-app-2026, author = {angular}, title = {angular-new-app security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/angular-angular-new-app/audits/1}, note = {Author version 1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "angular-new-app security audit report (audit version 1)" version: "1.0" type: report authors: - name: "angular" date-released: "2026-09-22" url: "https://skillstore.io/skills/angular-angular-new-app/audits/1" identifiers: - type: other value: "skillstore:angular-angular-new-app:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Start a First Angular Project

Create a structured Angular application with appropriate routing, styles, tests, and initial features.

Standardize Team Scaffolding

Apply consistent CLI options, naming, AI configuration, and generation practices across new projects.

Prototype an Angular Product

Scaffold a buildable Angular prototype with generated services, components, routing, and optional Tailwind CSS.

Try These Prompts

Create a Basic Application 
Create an Angular application named [app name] with routing, SCSS, and tests. Build a simple home page, then verify the build.
Add Generated Features 
Create an Angular application for [purpose]. Generate components for [pages] and services for [data needs], then verify the build.
Configure SSR and Tailwind 
Create an Angular application named [app name] with SSR, routing, Tailwind CSS, and [AI configuration]. Add an accessible responsive shell.
Plan a Production Foundation 
Create a scalable Angular application for [domain]. Define routes, generated artifacts, SSR needs, styling, test coverage, and build verification before implementation.

Best Practices

  • Confirm project requirements and Angular CLI availability before creating files.
  • Use Angular CLI generators and track every generated path before extending the code.
  • Keep tests enabled and run a build before offering to start the application.

Avoid

  • Do not install Angular CLI globally without explicit user approval.
  • Do not pass unvalidated user text into shell command arguments.
  • Do not start the development server before implementing features and obtaining user approval.

Frequently Asked Questions

What software does this skill require?
It requires Node.js, npm, Angular CLI access, and internet access for package installation.
Can it create projects with routing?
Yes. It can enable routing during Angular CLI project creation.
Does it support server-side rendering?
Yes. It can enable Angular server-side rendering when the project requires it.
Can it configure Tailwind CSS?
Yes. It adds Tailwind CSS through the Angular CLI and follows Tailwind version 4 guidance.
Will it remove generated tests?
No. It skips tests only when the user explicitly requests that option.
Does it start the application automatically?
No. It builds features first and asks the user before starting the development server.

Developer Details

Author

angular

License

MIT

Author version

v1.0

Skillstore revision

r1

Version notice

The author-declared version is not valid SemVer.

Repository

https://github.com/angular/skills/tree/66c90bae7662a0404a5cafd117123a2942aa8730/angular-new-app

Ref

2aa351cb09c29b7287d263bd8ea81e9bee3b2a61

Maintenance freshness

9/30/2026

Usage

0 downloads · 0 views

File structure

📄 SKILL.md