The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill's design guidelines specify loading fonts from Google Fonts via fonts.googleapis.com and fonts.gstatic.com. These are established and well-known services for serving web assets.
[INDIRECT_PROMPT_INJECTION]: The skill determines the subject of its output by reading from external sources such as Pull Requests, issues, or the current conversation session. This represents an ingestion point for untrusted data. However, the skill uses this information solely for editorial framing and document design, and it does not perform sensitive system operations or network actions based on the content of these sources.
[SAFE]: The skill consists of instructional markdown, styling guidelines, and standard CSS. No malicious patterns, such as command injection, data exfiltration, or obfuscation, were identified.

to-artifact