The Agent Skills Directory

[PROMPT_INJECTION]: The skill instructions are focused on educational guidance for storefront development. There are no attempts to override agent safety protocols, disregard previous instructions, or extract system prompts.
[DATA_EXFILTRATION]: No commands for accessing sensitive local files (e.g., SSH keys, AWS credentials) or environment variables were found. There are no network operations targeting untrusted domains; the only external reference is to Google's PageSpeed Insights for performance testing, which is a well-known service.
[OBFUSCATION]: The content is written in clear, human-readable Markdown, CSS, and JSX. There is no evidence of Base64 encoding, zero-width characters, homoglyphs, or hidden text patterns used to conceal malicious logic.
[REMOTE_CODE_EXECUTION]: The skill does not perform remote script downloads or execution (e.g., curl|bash). It references standard commerce platforms and themes (Dawn, Astra, Cornerstone) which are well-known and trusted in the industry.
[DYNAMIC_EXECUTION]: The code snippets provided use standard Web APIs like IntersectionObserver and standard React hooks. There is no use of unsafe dynamic execution functions like eval(), exec(), or runtime code generation from untrusted sources.
[COMMAND_EXECUTION]: No shell commands or subprocess spawning patterns were detected in the skill content or metadata.
[PRIVILEGE_ESCALATION]: There are no attempts to acquire elevated permissions, modify system configurations, or use commands like sudo.
[PERSISTENCE]: The skill does not attempt to create startup scripts, modify shell profiles, or establish cron jobs to maintain access across sessions.
[DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file does not utilize any dynamic shell execution placeholders (!command) that could trigger load-time vulnerabilities.

responsive-storefront