The Agent Skills Directory

[SAFE]: The skill implementation follows best practices for UI components. It performs local DOM manipulation to create an odometer effect without external dependencies or network access.
[INDIRECT_PROMPT_INJECTION]: The skill reads data from HTML attributes (data-to) or text content. However, the input is strictly sanitized in counter.js using a regular expression (/[^0-9]/g) that removes all non-numeric characters before processing, preventing any injection of malicious markup or instructions into the DOM.
[DYNAMIC_EXECUTION]: The component uses standard DOM APIs (createElement, appendChild) and requestAnimationFrame for animation. There is no usage of eval(), exec(), or dynamic script loading.

counter