The Agent Skills Directory

[SAFE]: The skill is primarily instructional documentation for the Syncfusion JavaScript Headless Editor library. All referenced external domains (e.g., syncfusion.com, vite.dev) and packages (e.g., @syncfusion/*) are well-known, reputable sources associated with the library's vendor.
[INDIRECT_PROMPT_INJECTION]: The editor library described in the skill processes untrusted external content from HTML, JSON, and the system clipboard, which represents a potential attack surface for indirect prompt injection.
Ingestion points: Content enters the application via setContent(), setDocument(), and the clipboard paste pipeline as detailed in references/content-operations.md and references/clipboard.md.
Boundary markers: There are no specific instructions regarding the use of boundary markers or delimiters to isolate untrusted user data from the agent's internal control instructions.
Capability inventory: The library enables the agent to perform extensive document modifications, including node insertion, formatting changes, and managing file uploads through the command system (e.g., insertNode, execute).
Sanitization: The library provides robust security features, including a non-configurable built-in sanitizer for the paste pipeline that strips dangerous tags (scripts, iframes) and unsafe URL protocols (javascript:), and built-in link validation for URLs (documented in references/clipboard.md and references/accessibility-security.md).

syncfusion-javascript-headless-editor