The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/slide-token-validator.py uses subprocess.run to execute the internal script scripts/html-token-validator.py. This implementation serves as a wrapper to delegate validation tasks while maintaining the expected CLI interface. The command construction uses a list of arguments rather than a shell string, which is a safe practice against command injection.
[EXTERNAL_DOWNLOADS]: The skill incorporates external resources from well-known services for presentation features. It references the Chart.js library via cdn.jsdelivr.net for rendering charts and includes curated image URLs from pexels.com for slide backgrounds in scripts/fetch-background.py. These downloads originate from reputable sources and are used for the skill's primary purpose.
[INDIRECT_PROMPT_INJECTION]: The slide generation process in scripts/generate-slide.py processes content from CSV data files and user-supplied strings. The skill mitigates potential injection and Cross-Site Scripting (XSS) risks by applying html.escape to content fields and utilizing a _safe_url validation function that restricts URL schemes to http, https, and local anchors.

design-system