The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The provided Solidity smart contract templates import external libraries from OpenZeppelin (@openzeppelin/contracts) and ERC721A (erc721a/contracts/ERC721A.sol). These are well-known, industry-standard sources for battle-tested smart contract development.
[COMMAND_EXECUTION]: The skill's resource section lists a local file assets/metadata-uploader.py. This script is identified as an IPFS upload utility but is neither provided in the skill content nor invoked by the instructions.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied metadata (such as names, descriptions, and traits) for NFT generation.
Ingestion points: Metadata fields in JSON and Solidity templates.
Boundary markers: None explicitly defined for user input in the templates.
Capability inventory: The skill does not contain any shell execution, file system writes, or network operation capabilities within its instructions or scripts.
Sanitization: The code utilizes standard Solidity string concatenation and Base64 encoding for on-chain metadata.
[SAFE]: The Base64 encoding observed in the OnChainNFT contract template is a legitimate implementation of the metadata standard for generating on-chain SVG images and JSON descriptions, rather than an attempt to obfuscate instructions or URLs.

nft-standards