The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill demonstrates a pattern for updating user interface components using real-time data from WebSockets, which introduces a vulnerability surface for indirect prompt injection if an agent subsequently processes the manipulated DOM.\n
Ingestion points: Data received via the message event listener on the WebSocket object in references/2024-03-12-hotwire-combobox-with-real-time-data.md.\n
Boundary markers: Absent; there are no delimiters or instructions for the agent to ignore content within the updated elements.\n
Capability inventory: The skill includes DOM manipulation capabilities such as innerHTML updates and element appending in references/2024-03-12-hotwire-combobox-with-real-time-data.md and references/2023-08-01-turbo-streams-inline-stream-tags.md.\n
Sanitization: Absent; external data values are interpolated into innerHTML using string replacement without proper escaping or sanitization.\n- [DATA_EXFILTRATION]: The skill contains configuration and code that establishes network connections to external domains for documentation purposes.\n
references/2024-03-12-hotwire-combobox-with-real-time-data.md contains a Stimulus controller configuration that connects to wss://example.com/ws, which constitutes a network operation to a domain outside the standard whitelist.

hwc-realtime-streaming