The Agent Skills Directory

[PROMPT_INJECTION]: No prompt injection patterns or attempts to override agent instructions were detected in the skill metadata or instructions.
[DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or potential for data exposure identified.
[DATA_EXFILTRATION]: No network operations or exfiltration patterns were found. The skill operates entirely within the local context of the browser/previewer.
[OBFUSCATION]: No obfuscated content, encoded strings, or hidden characters were detected in any of the files.
[REMOTE_CODE_EXECUTION]: The skill does not download or execute any remote scripts. It is entirely dependency-free as stated.
[COMMAND_EXECUTION]: No shell commands or subprocess execution calls are present in the skill.
[PRIVILEGE_ESCALATION]: No attempts to escalate privileges or modify system settings were found.
[PERSISTENCE]: No persistence mechanisms such as cron jobs or startup script modifications were detected.
[METADATA_POISONING]: Metadata in SKILL.md and recipe.motion.yaml accurately reflects the skill's functionality and attribution.
[INDIRECT_PROMPT_INJECTION]: The skill does not ingest untrusted data and lacks the capabilities (network/file access) to be leveraged in an injection attack chain.
[DYNAMIC_EXECUTION]: No runtime code generation or dynamic execution patterns (like eval or runtime compilation) were found.
[DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file does not use any dynamic context injection syntax (!command).

gradual-blur