The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/build.ts script invokes the external d2 CLI tool using Bun.spawnSync. This is necessary for rendering D2 diagram blocks into SVG format within the documentation. The script correctly identifies the binary location using Bun.which.
[DYNAMIC_EXECUTION]: At runtime, the build script generates temporary .d2 files in a system temporary directory (mkdtempSync) by concatenating a house style configuration with diagram source extracted from the Markdown. These generated files are then processed by the d2 compiler.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Markdown content provided by the user (ingestion point: scripts/build.ts reading the input file). While this represents a potential injection surface for malicious instructions, the script implements a sanitization pass that scans the final HTML output for external resource tags (like script, img, or link with remote http/https URLs) and aborts execution if any are found, mitigating potential data exfiltration via remote resource loading.

technical-html