The Agent Skills Directory

[SAFE]: The skill serves as a documentation and utility suite for the Bascik development framework. It identifies and provides guidance for the legitimate use of Node.js within web components.
[COMMAND_EXECUTION]: The script scripts/new-post.mjs performs local file system operations using node:fs (specifically mkdirSync and writeFileSync) to automate the creation of blog post files. It employs a slugify function and regex validation to ensure that user-provided titles and dates are sanitized before being used in file paths or front matter content.
[DYNAMIC_EXECUTION]: The documentation describes the framework's core capability of executing developer-written Node.js scripts inside HTML tags (e.g., <script data-bascik-build>). These scripts run in isolated child processes during the build or at request time, which is the intended functionality of the tool.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data sources such as Markdown files and API responses. To mitigate potential injection or Cross-Site Scripting (XSS) risks, the documentation explicitly instructs developers to use the html tagged template literal for automatic output escaping and recommends third-party sanitizers like sanitize-html for any raw HTML insertion.
[EXTERNAL_DOWNLOADS]: The documentation references external dependencies such as marked for Markdown rendering and the vendor's own @bascik/bascik package. These are standard library references for the described development workflow.

bascik-scripts