The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes curl, node, and jq to communicate with the Doubaoya API and process theme data. It specifically runs a bundled validation script scripts/validate-theme.mjs to verify theme configurations.
[EXTERNAL_DOWNLOADS]: The skill interacts with the vendor domain https://doubaoya.com to fetch theme templates, render HTML, and synchronize user configurations.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted inputs, such as user-provided style descriptions and local Markdown files, creating a potential surface for indirect injection.
Ingestion points: Data enters the context via user requests for theme modifications and the sample.md file used for rendering previews.
Boundary markers: The skill includes instructions to run scripts/validate-theme.mjs for self-checking generated themes before submission, which acts as a validation boundary.
Capability inventory: The agent environment has capabilities for network requests via curl, script execution via node, and file manipulation using jq, tee, and cp.
Sanitization: The included scripts/validate-theme.mjs performs a comprehensive safety scan of all generated theme strings, explicitly filtering out dangerous patterns such as <script>, <style>, class=, javascript: URIs, inline event handlers, and data: URIs to prevent malicious injections into the WeChat editor environment.

dby-theme