The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references and suggests downloading the D3.js library from the official d3js.org CDN (https://d3js.org/d3.v7.min.js). This is a well-known and trusted service for this library.
[INDIRECT_PROMPT_INJECTION]: The skill provides templates that ingest and render external data, creating a potential XSS surface in web environments.
Ingestion points: Data objects passed to the drawVisualization function in SKILL.md and the data props in the React templates assets/chart-template.jsx and assets/interactive-template.jsx.
Boundary markers: None; the skill does not instruct the agent to use delimiters or warnings for the processed data.
Capability inventory: The skill uses D3 to manipulate the DOM, including the .html() method for tooltips in SKILL.md and assets/interactive-template.jsx, which can execute script content if present in the data.
Sanitization: Absent. Property values such as d.label and d.category are interpolated directly into HTML strings passed to the .html() method without escaping or filtering.

d3-viz