The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to install the motion package from the official npm registry, which is the standard and legitimate package for the library described.
[INDIRECT_PROMPT_INJECTION]: The skill contains examples for components that ingest and display external data, creating a standard injection surface common to UI libraries. 1. Ingestion points: The notifications prop in NotificationList and the items prop in StaggeredList (SKILL.md) accept external content for rendering. 2. Boundary markers: Data is interpolated using standard React JSX curly brace delimiters. 3. Capability inventory: The skill is limited to UI rendering; no file system, network, or process execution capabilities are present in the code examples. 4. Sanitization: React automatically escapes dynamic content within JSX, providing a built-in layer of protection against typical injection attacks.

motion