The Agent Skills Directory

[SAFE]: The skill primarily consists of architectural guidelines and best practices for data visualization, ensuring accessibility and consistency.
[INDIRECT_PROMPT_INJECTION]: The skill documentation (specifically in references/interaction.md) identifies that series and category names are untrusted data from external sources like CSVs or APIs. It provides remediation guidance by instructing the agent to use textContent or createTextNode instead of innerHTML to prevent cross-site scripting (XSS) or injection attacks.
[COMMAND_EXECUTION]: The skill includes utility scripts (scripts/validate_palette.js and scripts/validate_palette.py) for mathematical color validation. These scripts strictly validate input hex codes using regular expressions before processing, ensuring that user-provided strings cannot be used for command injection or other malicious activities.

dataviz