The Agent Skills Directory

[SAFE]: The skill provides stylistic themes for document formatting. Technical analysis of the instructions and 10 theme definitions found no malicious behavior, command execution, or exfiltration patterns.\n- [DATA_EXFILTRATION]: The instructions reference the path ~/.claude/skills/canvas-design/canvas-fonts/ to source premium fonts. This access is limited to a specific asset subdirectory for styling purposes and does not target sensitive configuration files or credentials.\n- [INDIRECT_PROMPT_INJECTION]: The skill supports custom theme generation using user-provided descriptions. This ingestion point is low risk as the output is restricted to design parameters like hex codes and font families.\n- [METADATA_POISONING]: The LICENSE.txt file mentions a copyright year of 2026. This is likely a placeholder error and does not constitute a deceptive security threat.

theme-factory