The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references the official D3.js library (d3.v7.min.js) from the d3js.org CDN for use in web-based visualisations. This is a reference to a well-known service for data visualisation.
[PROMPT_INJECTION]: The skill implements a data ingestion surface through D3 visualisation functions and React templates. Specifically, the tooltip implementation in SKILL.md and assets/interactive-template.jsx uses the .html() method to render data-driven content (e.g., ${d.label}) into the DOM. This pattern creates a potential Cross-Site Scripting (XSS) or Indirect Prompt Injection surface if the input data is sourced from untrusted external entities and rendered without sanitization. Evidence Chain: 1. Ingestion points: InteractiveChart({ data }) in assets/interactive-template.jsx and drawVisualization(data) in SKILL.md. 2. Boundary markers: None present to distinguish data from executable scripts. 3. Capability inventory: Direct DOM manipulation via d3.select().html(). 4. Sanitization: None demonstrated in the provided code examples.

d3-viz