The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The documentation includes patterns for lazy-loading JavaScript libraries (e.g., chart.js, highlight.js, flatpickr) using dynamic import() statements to optimize performance. These are standard development practices for modern web applications.
[DATA_EXFILTRATION]: Examples demonstrate the use of the fetch API and the Web Share API (navigator.share). These are utilized for legitimate purposes such as asynchronously loading HTML fragments from the server or enabling native sharing functionality. No unauthorized data transmission to external domains was detected.
[INDIRECT_PROMPT_INJECTION]: The skill describes techniques for ingesting remote content and rendering it via innerHTML. While this represents a potential attack surface if the source data is compromised, the implementation follows standard Stimulus/Hotwire patterns for server-rendered applications. No specific malicious exploitation patterns are present.
[COMMAND_EXECUTION]: The skill does not use any shell command execution or dynamic context injection features. All documented behavior is restricted to client-side JavaScript execution within the browser environment.

stimulus-controllers