The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides a local shell script scripts/verify-ckeditor5.sh intended for developer use to audit the structure of TYPO3 extensions, checking for the presence of YAML configurations and JavaScript plugin files.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of plugins that process rich text content, which is a common vector for indirect prompt injection. The documentation mitigates this risk by providing clear instructions on configuring TYPO3's processing rules to strictly whitelist allowed HTML tags and attributes.
Ingestion points: TYPO3 tt_content database records and user-submitted data via the Rich Text Editor.
Boundary markers: Not explicitly defined within the agent's instructions, as the focus is on development of the underlying platform.
Capability inventory: The skill enables the modification of extension source code and the execution of the included verification script.
Sanitization: The reference files (references/typo3-integration.md) provide comprehensive examples for allowTags, allowAttributes, and denyTags to sanitize output.
[EXTERNAL_DOWNLOADS]: The skill references official CKEditor 5 documentation and the public GitHub repository of Netresearch DTT GmbH for further reference. These are well-known and relevant technical resources for TYPO3 developers.

typo3-ckeditor5