The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local Node.js scripts provided in the skill directory (update-iconfont.js and replace-emoji.js) to perform font conversion and code replacement tasks within the user's project directory.
[DATA_EXPOSURE]: The included scripts read local project files (.wxml, .js, .ttf, .wxss) to perform intended search-and-replace operations. No network activity or external exfiltration of this data was detected.
[PROMPT_INJECTION]: The skill processes external data (mini-program source code) to find emojis. While this presents a theoretical surface for indirect prompt injection, the impact is minimized by the skill's specific focus on emoji-to-class mapping and the requirement for user confirmation before executing changes.

miniprogram-iconfont