The Agent Skills Directory

[SAFE]: The skill organizes visual assets using a local JSON manifest and generates a static HTML gallery without external dependencies.
[SAFE]: The scripts/build_gallery.py script implements strong path validation using pathlib.Path.resolve() and is_relative_to() to ensure that all file operations (reads and writes) remain strictly within the designated library directory, effectively preventing path traversal attacks.
[SAFE]: Input sanitization is applied correctly; the script uses html.escape for all manifest data (IDs, titles, tags, etc.) before inserting them into the generated HTML, preventing potential stored Cross-Site Scripting (XSS) vulnerabilities.
[SAFE]: No network access, remote code execution, or credential exposure was detected. The skill operates entirely on local files within its own directory structure.

asset-library