The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references the official D3.js library through its primary CDN and includes standard imports for the package.
Evidence: The skill documentation in SKILL.md provides a link to https://d3js.org/d3.v7.min.js and instructions for package installation.
[INDIRECT_PROMPT_INJECTION]: The skill provides code patterns and templates that ingest external data and render it into the DOM. Specifically, the tooltip implementations provided in SKILL.md and assets/interactive-template.jsx use the D3 .html() method to directly insert data attributes into the document. If the input data contains malicious script tags, this could lead to code execution in the visualization environment.
Ingestion points: The data object processed by visualization functions in SKILL.md and the data prop in assets/interactive-template.jsx.
Boundary markers: Absent; no specific instructions or delimiters are provided to isolate untrusted data.
Capability inventory: The skill demonstrates the use of d3.selection.html() for DOM manipulation in both SKILL.md and assets/interactive-template.jsx.
Sanitization: Absent; the provided templates interpolate properties like d.label directly into HTML strings without escaping or sanitization.

d3-viz