The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides patterns for reading and processing game state data from browser-based storage (localStorage and IndexedDB), which constitutes an untrusted data ingestion surface. * Ingestion points: Found in SKILL.md (localStorage.getItem) and references/save-patterns.md (idbLoad). * Boundary markers: Implementation patterns include the use of JSON.parse within try/catch blocks and typed interfaces to ensure data conformant with expected schemas. * Capability inventory: The skill is limited to browser storage operations and in-memory registry updates; it does not contain shell command execution, file system writes, or network exfiltration capabilities. * Sanitization: Data is treated as structured JSON and is not used to construct commands or dynamic code.
[OBFUSCATION]: The skill includes a reference implementation for ObfuscatedSaveManager that utilizes Base64 encoding (btoa, atob) to discourage casual tampering with save data. This is a standard game development practice and does not involve the skill itself attempting to hide malicious logic.

phaser-saveload