The Agent Skills Directory

[SAFE]: The skill provides documentation, configuration templates, and migration guides for TYPO3 developers. All activities described are consistent with standard CMS extension development and best practices.
[EXTERNAL_DOWNLOADS]: The skill references downloading the friendsoftypo3/content-blocks package from Packagist, which is the official and trusted PHP package registry. It also refers to official documentation and repositories on GitHub, which are trusted sources.
[COMMAND_EXECUTION]: The skill instructs the user on using local development commands such as ddev composer require, ddev typo3 cache:flush, and ddev typo3 extension:setup. These commands are standard for the TYPO3 ecosystem when using DDEV for local development environments.
[INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by instructing the agent to process and generate config.yaml and content-blocks.yaml files which may contain user-controlled content.
Ingestion points: YAML configuration files located in the ContentBlocks/ directory and project root.
Boundary markers: None explicitly defined in the instructions to separate untrusted data from instructions.
Capability inventory: Execution of shell commands via ddev and writing/modifying local project files.
Sanitization: The skill relies on standard TYPO3 core validation and does not define additional sanitization for the data processed by the agent. Given the intended use case as a developer tool, the risk level is characteristic of typical coding assistant skills.

typo3-content-blocks