The Agent Skills Directory

[SAFE]: The skill is a template for visual card generation. It does not perform sensitive file operations, network exfiltration, or execute arbitrary code.
[EXTERNAL_DOWNLOADS]: The example.html file loads Tailwind CSS from https://cdn.tailwindcss.com and fonts from https://fonts.googleapis.com. These are well-known, trusted services used for styling purposes.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text to populate the cards. While there are no explicit boundary markers to delimit user data from the generation instructions, the skill's capabilities are limited to producing stylized HTML, posing low risk.
Ingestion points: User content provided to the agent to be turned into card carousels (described in SKILL.md).
Boundary markers: None present; the instructions guide the agent on how to structure the user data into the HTML template.
Capability inventory: The skill is designed for HTML/CSS visualization and does not include subprocess execution, file-system writes, or network exfiltration logic.
Sanitization: None specified in the prompt instructions.

card-xiaohongshu