The Agent Skills Directory

[SAFE]: The skill incorporates several security best practices that mitigate common risks associated with automated report generation:
Data Sanitization: The scripts/generate_report.py utility uses html.escape(..., quote=True) on all gathered evidence before rendering it into HTML templates. This process neutralizes potential cross-site scripting (XSS) payloads embedded in patent data or market research.
Template Integrity: The rendering engine includes a validation step that ensures all placeholders in the HTML templates are correctly resolved and prevents the introduction of unauthorized template tokens from user-supplied or gathered data.
Filesystem Security: The script implements a safe_output function that enforces strict file extension requirements (.html) and prevents the skill from writing to sensitive filesystem locations such as the root directory.
Self-Contained Output: The provided HTML templates are designed to be self-contained with no external runtime dependencies (no external scripts or remote fonts), which eliminates risks associated with remote resource loading and tracking.
Consistent Identity: The skill author ('patsnap') and the referenced MCP tools are consistent, and all internal logic is transparent and aligned with the skill's stated purpose of R&D report generation.

create-technology-competitive-intelligence-rd