The Agent Skills Directory

[SAFE]: The skill is a legitimate collection of documentation and code examples for the Elysia framework. No malicious intent or suspicious patterns were found during the analysis.
[PROMPT_INJECTION]: No prompt injection attempts, safety filter bypasses, or instructions to ignore system guidelines were detected in any of the skill files.
[DATA_EXFILTRATION]: No patterns of data exfiltration or unauthorized access to sensitive files were found. Network operations described are standard for API development and testing (e.g., localhost communication).
[CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or private tokens are present. Examples use appropriate placeholders such as 'Bearer ${token}' or 'valid-key'.
[REMOTE_CODE_EXECUTION]: No remote code execution patterns, unsafe command execution, or suspicious external downloads were identified.
[OBFUSCATION]: No evidence of encoding, hidden characters, homoglyphs, or other obfuscation techniques was found in the text or code snippets.
[INDIRECT_PROMPT_INJECTION]: While the skill describes endpoints that process external data (params, body, headers), it strictly enforces TypeBox validation schemas. There are no high-risk capabilities (like shell execution or file system writes) that could be exploited via data injection.

api-framework-elysia