The Agent Skills Directory

[SAFE]: No security threats were identified. The skill is a legitimate administrative tool for Enonic XP, providing templates for content migration and transformation using official platform APIs.
[COMMAND_EXECUTION]: The skill uses a local script scripts/find-enonic-targets.mjs to detect the Enonic XP project version and structure. Technical review of the script confirms it only performs local read operations on project configuration files (like gradle.properties) and does not use network requests or unsafe dynamic code execution.
[PROMPT_INJECTION]: Analysis of SKILL.md shows standard instructional patterns for content management tasks. There are no attempts to bypass safety filters, extract system prompts, or override agent constraints.
[PROMPT_INJECTION]: The skill includes examples for importing data from JSON sources, which is a potential surface for indirect prompt injection. This risk is inherent to the skill's purpose of bulk data operations and is handled safely within the Enonic XP API context.
Ingestion points: Local workspace file scanning via scripts/find-enonic-targets.mjs and JSON data ingestion in references/examples.md.
Boundary markers: Absent in provided code templates.
Capability inventory: Bulk content creation, modification, deletion, and publishing via Enonic XP lib-content and lib-node APIs.
Sanitization: Absent in example code, reflecting standard template patterns.

enonic-content-management