The Agent Skills Directory

[SAFE]: No malicious patterns detected. The skill performs localized tasks (MTG card parsing and PDF rendering) using documented external resources and follows clear operational boundaries.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted deck lists (txt, Moxfield, CSV) which constitutes a potential injection surface. However, the skill provides a strong mitigation through 'The Iron Rule,' which mandates that all card data must be sourced from an authoritative Scryfall lookup rather than user-supplied text or the agent's internal training data. Capability is restricted to writing PDFs and text art files to local cache/temporary directories.
[EXTERNAL_DOWNLOADS]: The skill fetches legitimate data for its primary functionality: download-mtgjson retrieves card metadata from Scryfall, and fetch-art downloads ASCII art from community repositories (asciiart.eu and asciiart.website). These operations are transparently documented and align with the skill's stated purpose.

proxy-printer