The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill and its generated output files reference legitimate resources from well-known and established technology providers.
The HTML template and resulting diagrams load fonts from Google's official domains (fonts.googleapis.com and fonts.gstatic.com).
Some diagram examples and output files include references to the gif.js library via the JSDelivr CDN (cdn.jsdelivr.net).
[INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by processing user-provided descriptions or code to generate diagram labels, but incorporates adequate safeguards.
Ingestion points: User input (plain language or Mermaid code) is ingested and stored in intermediate JSON files as seen in the examples/ directory.
Boundary markers: The skill uses specific ARCHIFY sentinel comments as slots in assets/template.html to clearly separate diagram data from the surrounding HTML boilerplate.
Capability inventory: The Node.js renderers utilize standard file system operations (fs.readFileSync, fs.writeFileSync) within renderers/shared/cli.mjs to handle input/output.
Sanitization: A robust escaping utility (esc) is implemented in renderers/shared/utils.mjs and used across all renderers to sanitize user-provided labels and metadata before they are interpolated into the final SVG or HTML content.

dynamic-archify