The Agent Skills Directory

[SAFE]: The skill instructions in SKILL.md and references/prototype-contract.md prioritize security and privacy by mandating local-only artifacts without network access, telemetry, or external scripts.
[SAFE]: The bundled HTML asset (assets/prototype.html) includes a restrictive Content Security Policy (default-src 'none') that prevents the execution of external resources or network requests, protecting the user from unintentional data leaks.
[SAFE]: The skill provides explicit guardrails against prompt injection and data exposure by instructing the agent to escape imported content, use synthetic data, and avoid embedding confidential information or credentials in shareable artifacts.
[SAFE]: The framework prevents persistence or privilege escalation by clarifying that prototypes are disposable and should never be copied directly into production environments or mutate existing configurations.

pragman-prototype