The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Instructs the user to install @tanstack/markdown and octane from the public npm registry. These are official packages associated with the skill's authoring organization.
[PROMPT_INJECTION]: Identifies a security boundary related to indirect prompt injection (XSS). The documentation includes a critical warning that enabling allowHtml: true when rendering untrusted Markdown input bypasses the library's sanitization, creating a Cross-Site Scripting risk. This demonstrates a security-conscious design by guiding users toward safe defaults.

octane-rendering