The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references developer documentation hosted on Crocoblock's official GitHub repository and website for technical reference.
[DYNAMIC_EXECUTION]: The skill provides guidance on registering PHP callbacks. It includes explicit warnings against executing user-controlled callables or using unrestricted unserialize() on field data, directing developers to use the specific JetEngine allowlist filters instead.
[INDIRECT_PROMPT_INJECTION]: The skill provides instructions for handling untrusted field data with a focus on preventing injection through proper data handling.
Ingestion points: External field data is passed as the first argument to callbacks as described in SKILL.md.
Boundary markers: The instructions recommend using deterministic types and explicit validation checks such as is_numeric, is_array, and in_array to ensure data conforms to expected formats.
Capability inventory: The logic is constrained to data formatting and rendering within the JetEngine framework using standard WordPress functions.
Sanitization: The skill mandates the use of sanitization and escaping functions including esc_html, wp_kses_post, and sanitize_text_field before outputting data.

je-listings-callback