The Agent Skills Directory

[COMMAND_EXECUTION]: The instructions recommend running bin/rails stimulus:manifest:update. This is a standard Ruby on Rails administrative command used to synchronize the JavaScript controller manifest and does not involve elevated privileges or suspicious network activity.
[INDIRECT_PROMPT_INJECTION]: The skill describes an 'AJAX Updates' pattern that ingests data from a URL and injects it into the DOM.
Ingestion points: Data is fetched via fetch(this.urlValue) in the JavaScript examples provided in SKILL.md.
Boundary markers: No delimiters or specific 'ignore instructions' warnings are present in the code snippets.
Capability inventory: The pattern utilizes fetch for network requests and innerHTML for DOM manipulation.
Sanitization: The example does not demonstrate sanitization of the fetched HTML before it is assigned to this.element.innerHTML, which represents a standard XSS vulnerability surface typical of this coding pattern.

stimulus-controllers