The Agent Skills Directory

[NO_CODE]: The skill consists entirely of instructional markdown and a standard Apache 2.0 license file. There are no scripts, binaries, or executable components.
[PROMPT_INJECTION]: The instructions utilize a persona ("design lead at a design studio") to guide the agent's creative output. These instructions are domain-specific and do not attempt to override system safety protocols or extract system prompts.
[DATA_EXFILTRATION]: No network-enabled tools or commands (such as curl or wget) are present. There is no access to sensitive local file paths or environment variables.
[INDIRECT_PROMPT_INJECTION]: The skill is intended to process user-provided design briefs. While this creates an ingestion point for untrusted data, the skill lacks the capabilities (such as file writing or network access) that would be required to facilitate an attack. The disable-model-invocation: true flag in the frontmatter further restricts the agent's ability to take autonomous actions.
[OBFUSCATION]: No encoded strings, hidden characters, or homoglyph substitutions were detected. The hex codes provided in the text (e.g., #F4F1EA, #D97757) are standard CSS color values used for illustrative design purposes.
[DYNAMIC_CONTEXT_INJECTION]: The skill does not use any dynamic shell execution syntax (!command) at load time.

frontend-design