The Agent Skills Directory

[SAFE]: The skill serves as a legitimate technical reference pack for Craft CMS 5 plugins. It contains standard instructional content, including Twig API usage, PHP migration examples, and environment configuration guidelines.
[EXTERNAL_DOWNLOADS]: The documentation includes instructions for installing official plugins using Composer (e.g., composer require nystudio107/craft-vite) and provides links to official GitHub repositories for vendors such as Verbb, nystudio107, PutYourLightsOn, and SpaceCat Ninja. These are standard development workflows for the documented platform.
[INDIRECT_PROMPT_INJECTION]: Several documented plugins (e.g., Formie, Feed Me, and Sprig) are designed to ingest and process external or user-supplied data. The skill mitigates risks by documenting built-in security features such as HTML Purifier integration, whitelisting of oEmbed domains, and the use of CSRF protection to maintain a secure environment.
[CREDENTIALS_SAFE]: The skill provides examples for managing sensitive information, such as AWS credentials for SES, by recommending the use of environment variables and .env files. These placeholders follow industry best practices for secret management and do not contain hardcoded credentials.
[COMMAND_EXECUTION]: The skill mentions various CLI commands for the Craft CMS framework (e.g., ddev craft ...) used for administrative tasks like running migrations, clearing caches, and processing job queues. These are intended for local development and server maintenance by authorized developers.

craft-plugins