The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references the official D3.js library via its CDN (https://d3js.org/d3.v7.min.js) within the main documentation. This is a well-known service and the reference is consistent with the skill's purpose.
[PROMPT_INJECTION]: The skill instructions and code templates demonstrate a surface for indirect prompt injection.
Ingestion points: Functions and components like drawVisualization in SKILL.md and InteractiveChart in assets/interactive-template.jsx ingest external data objects to drive the visualization.
Boundary markers: No boundary markers or delimiters are employed to separate data values from potential instructions.
Capability inventory: The skill leverages D3.js for extensive DOM and SVG manipulation, including event handling and content rendering.
Sanitization: The templates utilize d3.selection.html() to render tooltip content from data properties such as d.label. Without proper escaping or sanitization, this allows for the execution of arbitrary HTML/JavaScript (XSS) if the source data is untrusted.

d3-viz