The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill includes a script scripts/check-updates.py that connects to registry.npmjs.org to check for the latest version of the D3.js library. This targets a well-known and trusted package registry.
[COMMAND_EXECUTION]: The documentation and SKILL.md provide standard commands for installing the D3.js library using common package managers such as npm, yarn, and pnpm.
[INDIRECT_PROMPT_INJECTION]: The reference files (specifically references/06-data-utilities.md) describe patterns for fetching and processing external data via d3.csv(), d3.json(), and d3.tsv(). This identifies an ingestion surface for potentially untrusted data typical of data visualization workflows.
[DATA_EXFILTRATION]: The maintenance script scripts/check-updates.py reads local skill files (VERSION.json, SKILL.md, and the references/ directory) to verify file integrity and check for staleness. No access to sensitive user files or environment variables was detected.

d3