The Agent Skills Directory

[SAFE]: The skill's primary function is to generate HTML email templates from a JSON configuration. Technical analysis of the provided scripts and instructions shows no evidence of malicious intent or hidden capabilities.
[INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided data (e.g., company names, messages, and URLs) to populate the templates. The Python script (scripts/generate_email_template.py) uses html.escape to sanitize these inputs before embedding them in the generated HTML, which is an effective measure against basic injection attacks.
[COMMAND_EXECUTION]: The skill utilizes a local Python script to perform the template generation. The script relies exclusively on standard Python libraries (argparse, json, sys, html) and performs standard file read/write operations within its expected scope.
[OBFUSCATION]: The script contains &zwnj; (zero-width non-joiner) characters within the render_preheader function. In the specific context of email development, this is a standard industry technique used to control the display of preview text in email clients and does not represent an attempt to hide malicious code or URLs.

html-mail-builder