The Agent Skills Directory

[SAFE]: No security issues detected. The skill contains informational documentation and boilerplate code for frontend development patterns.- [DATA_EXPOSURE]: No hardcoded credentials, secrets, or sensitive file paths were found. The network operations demonstrated in the code blocks (e.g., fetch('/api/markets')) are illustrative relative API calls standard for frontend development tutorials and do not point to external or malicious domains.- [OBFUSCATION]: No obfuscated content, zero-width characters, encoded strings, or homoglyph attacks were detected in the text or code samples.- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known NPM packages (@tanstack/react-virtual and framer-motion). No suspicious, unversioned, or remote script executions (such as curl | bash) are present.- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for data ingestion and user input handling, but these are educational in nature and do not execute in the agent context to process untrusted data.
Ingestion points: Patterns like DataLoader and CreateMarketForm describe how a frontend app would ingest data from an API or user.
Boundary markers: N/A for static code snippets.
Capability inventory: Minimal capabilities including fetch and console.error are mentioned in code samples.
Sanitization: Basic validation logic (e.g., .trim() and length checks) is demonstrated in the form handling example.- [DYNAMIC_CONTEXT_INJECTION]: The skill does not use any shell execution syntax (!command) or dynamic context placeholders.

frontend-patterns