The Agent Skills Directory

[SAFE]: No evidence of prompt injection, data exfiltration, or malicious persistence mechanisms was found in the skill's instructions or supporting files. The skill purpose is well-defined and the implementation matches the stated intent.
[SAFE]: The core validation logic in scripts/validate_user_research_prior_art.py is deterministic and uses yaml.safe_load for secure parsing of artifacts. It does not perform network operations or execute arbitrary system commands.
[SAFE]: The skill implements a security-minded approach to handling external research data, specifically instructing the agent to treat fetched content as data rather than instruction and providing a robust identifier-to-filename sanitization function (record_filename) that prevents path traversal by hashing complex research identifiers (like DOIs containing slashes) into safe filename stems.
[SAFE]: All external sources and dependencies (e.g., Crossref, arXiv, Nielsen Norman Group, GOV.UK) are reputable, well-known scholarly and practitioner research repositories accessed according to their official documentation.

user-research-prior-art-survey