The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests external data in the form of color strings (HEX, RGB, OKLCH, etc.) via command-line arguments in its JavaScript utilities.
Ingestion points: The scripts color-convert.js, contrast-check.js, harmony-gen.js, and palette-gen.js receive untrusted input from process.argv.
Boundary markers: There are no explicit prompt boundary markers for these inputs.
Capability inventory: The skill has access to the Bash tool for script execution and file system access as per allowed-tools.
Sanitization: Inputs are strictly validated using regular expressions that target specific color function patterns, significantly mitigating the risk of instructions being interpreted as data.
[EXTERNAL_DOWNLOADS]: The references/tools-and-libraries.md file references various external resources, including well-known color tools and package installation commands.
The file lists installation steps for established NPM packages such as culori, colorjs.io, and chroma.js.
It provides links to reputable online utilities like WebAIM, Leonardo, and oklch.com.
These references are purely informational for the developer and do not involve any automated downloads or execution during the skill's normal operation.

color-ops