The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill documents interfaces where component styles and SVG patterns are configured through data-driven attributes, creating a surface for potential instruction injection in processed data.
Ingestion points: Configuration fields such as elementAttr, wrapperAttr, and the SVG template callback function defined in references/custom-css.md.
Boundary markers: Standard programming boundaries are used; no specific security delimiters or escaping mechanisms are explicitly required for the CSS/SVG property values in the documentation.
Capability inventory: The skill enables the modification of component DOM attributes and the programmatic generation of SVG elements within patterns to customize the user interface.
Sanitization: The documentation in references/icons.md includes a specific security advisory recommending that SVG content be sourced only from trusted origins to mitigate risks associated with executable code.
[EXTERNAL_DOWNLOADS]: The skill refers to the official devextreme-cli utility, which is downloaded and executed using npx to facilitate the building of custom theme files and color swatches.

devextreme-theming