The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill mentions well-known tools and resources for building sprites, such as spritezero, spreet, and Martin, as well as icon libraries like Maki and Temaki. These are documented as recommendations for developer workflows and originate from trusted or established organizations in the mapping community.
[INDIRECT_PROMPT_INJECTION]: The skill documents APIs that ingest external data, such as map.loadImage(), map.addSource(), and Image.src for SVGs.
Ingestion points: URLs for PNG, SVG, and GeoJSON assets in SKILL.md code examples.
Boundary markers: The instructions focus on correct API usage and state management (e.g., using hasImage() to prevent registration errors).
Capability inventory: The documented capabilities are limited to frontend map rendering (registering images, adding layers, and markers). There are no capabilities related to filesystem modification or shell execution.
Sanitization: The skill provides best practices for handling cross-origin assets (e.g., crossOrigin = 'anonymous') and managing image IDs to prevent runtime errors.
[DATA_EXFILTRATION]: The skill provides security-conscious advice, explicitly warning against using raw.githubusercontent.com for production assets to avoid rate-limiting issues and highlighting the privacy implications of authenticated repository URLs.

maplibre-sprites-icons