The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill includes a command to fetch the htmx-ext-ws extension from the unpkg.com CDN. This is a well-known service used for distributing npm packages, and the skill documents this as a best practice for local file hosting to improve reliability.
[INDIRECT_PROMPT_INJECTION]: The skill documents an API that provides access to untrusted user data transmitted via HTTP headers, specifically through the request.htmx.prompt attribute.
Ingestion points: User-supplied data in the HX-Prompt header accessed via request.htmx.prompt in SKILL.md.
Boundary markers: None provided in the usage examples.
Capability inventory: The skill facilitates Django view rendering and client-side event triggering.
Sanitization: The documentation does not explicitly detail sanitization requirements for the prompt header data, which is inherent to the library's role as a request wrapper.

django-htmx