The Agent Skills Directory

[PROMPT_INJECTION]: No malicious injection patterns were found. A static analysis hint regarding 'concealment' in references/_shared/page-archetypes.md was found to be a false positive; the text discusses avoiding 'burying' status information in user interfaces (a design anti-pattern), rather than concealing the AI's own actions.
[DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or network exfiltration patterns were detected. Referenced URLs are for well-known legitimate products used as design examples.
[OBFUSCATION]: No Base64, zero-width characters, homoglyphs, or other obfuscation techniques were identified within the skill's contents.
[REMOTE_CODE_EXECUTION]: The skill does not involve downloading or executing external scripts. Mentions of sync scripts refer to documentation maintenance tasks for the skill author and are not instructions for the agent to execute at runtime.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided product descriptions. While it lacks specific boundary markers for this data, it does not instruct the agent to use any dangerous tools (like shell access or network requests) that could be exploited via indirect injection. The risk level is low and standard for instructional skills.

visual-identity