The Agent Skills Directory

[SAFE]: The skill provides developer guidance and project templates for the DatoCMS ecosystem. All external resources, including npm packages and documentation links, point to trusted organizations and well-known services (e.g., datocms, react, vite, lodash-es).
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from the DatoCMS environment, which creates an inherent attack surface for indirect prompt injection if external content contains instructions.
Ingestion points: Data enters the context via ctx.formValues, ctx.item, and ctx.upload as documented in references/field-extensions.md and references/sidebar-panels.md.
Boundary markers: The instructions mandate wrapping all UI in <Canvas ctx={ctx}>, which leverages the SDK's structural boundaries.
Capability inventory: The skill uses standard development tools for building (npm run build) and provides templates for network operations via fetch and @datocms/cma-client-browser for platform integration.
Sanitization: The skill recommends using datocms-structured-text-slate-utils for schema validation and safe data conversion, as noted in references/form-values.md.
[COMMAND_EXECUTION]: The documentation includes standard development commands for scaffolding and maintaining projects (e.g., npm install, npm run dev, npm run build in references/project-scaffold.md). These are necessary for the skill's primary purpose and are executed within the user's local development environment.

datocms-plugin