The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute the render_report.py and validate_report.py scripts. This is the intended primary purpose of the skill to transform data into formatted reports.
[SAFE]: The skill implements a mandatory security validation step. The scripts/validate_report.py script automatically inspects generated HTML files for potential security violations, including external resource dependencies, duplicate IDs, and the presence of network APIs or unsafe event handlers.
[SAFE]: Data integrity and sanitization are handled by a centralized escaping mechanism in scripts/render_report.py. The esc() function applies html.escape to all untrusted strings before embedding them into the HTML or SVG output, mitigating Cross-Site Scripting (XSS) risks.
[SAFE]: The skill enforces a strict self-containment policy. It explicitly bans the use of external CDNs, remote images, and external stylesheets, ensuring that all reporting data remains local to the generated file and preventing data exfiltration through remote resource loading.
[SAFE]: The renderer script is designed with a minimal attack surface, using only Python standard libraries and avoiding third-party package dependencies that could introduce supply chain risks.

create-html-report