The Agent Skills Directory

[SAFE]: The skill provides structured guidance for generating CEL expressions. It explicitly notes that procedural JavaScript (the js dialect) has been retired from this authoring surface, which limits the risk of arbitrary code execution.
[SAFE]: The documentation includes security-relevant best practices, such as warning that client-side visibility rules (visibleWhen) should not be used for access control and that server-side validation/hooks should be used instead.
[SAFE]: All referenced packages (such as @objectstack/spec and @objectstack/formula) are consistent with the skill's stated vendor, 'objectstack-ai'.
[SAFE]: No obfuscation, data exfiltration patterns, or unauthorized privilege escalation mechanisms were detected in the instructions or example evaluations.

objectstack-formula