The Agent Skills Directory

[SAFE]: The skill consists of technical documentation and code examples for the react-intl library. All provided patterns for provider setup, rendering, and ICU message formatting follow standard security best practices for web development.
[DYNAMIC_EXECUTION]: The lazy loading examples in examples/core.md demonstrate the use of dynamic import() for loading local JSON message files. This is a standard performance optimization and is restricted to local relative paths within the project structure, posing no risk of executing untrusted code.
[INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing localized messages, which constitutes a potential vulnerability surface if the source of the translation strings is untrusted. However, the skill utilizes standard React rendering which inherently escapes content, and it does not expose any dangerous capabilities that could be abused via injected content.
Ingestion points: messages object passed to IntlProvider in examples/core.md and referenced throughout pluralization examples.
Boundary markers: Absent, as the skill assumes standard local JSON message catalogs.
Capability inventory: The skill contains no executable scripts or logic that perform shell command execution or network writing operations.
Sanitization: Relies on React's automatic output escaping for JSX content and the ICU parser's syntax validation.

web-i18n-react-intl