The Agent Skills Directory

[SAFE]: The skill provides educational content focused on identifying and mitigating XSS vulnerabilities. It includes a sink inventory, safe coding patterns, and remediation checklists which are standard industry best practices.
[EXTERNAL_DOWNLOADS]: The skill references established and trusted libraries such as dompurify, jsdom, and html-entities as recommendations for sanitization and output encoding. These are documented neutrally as implementation examples.
[INDIRECT_PROMPT_INJECTION]: While the skill is intended to audit external code (which could contain malicious instructions), the instructions are purely defensive and focus on standardizing security boundaries through sanitization and validation.

xss-prevention