The Agent Skills Directory

[SAFE]: The skill is designed to produce static HTML mockups and Markdown specifications. It explicitly states that it does not generate Jetpack Compose or other executable code, reducing the risk of malicious code generation.
[EXTERNAL_DOWNLOADS]: The skill references official documentation from trusted sources including Google's Material Design (m3.material.io) and Android Developer (developer.android.com) sites. These references are used for design token mapping and best practices.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from a local design-system.md file. While this is an entry point for external data, the skill's capabilities are limited to generating UI mockups and documentation, posing minimal security risk.
Ingestion points: Reads design-system.md as input for tokens and typography direction.
Boundary markers: None explicitly defined for input file processing.
Capability inventory: Produces HTML/CSS for mockups and Markdown text for specifications; no tool calls, network operations, or file system writes are defined in the provided files.
Sanitization: Not present, however, the output format (UI mockups) does not provide a high-value target for injection attacks.

design-android