The Agent Skills Directory

[EXTERNAL_DOWNLOADS] (LOW): The skill recommends installing jupyterlab and ipykernel using uv. While these are external dependencies, the risk is mitigated because the skill author is 'openai' (a trusted organization) and the packages are industry standards for Jupyter environments.
[PROMPT_INJECTION] (LOW): The skill is susceptible to indirect prompt injection through the --title argument in scripts/new_notebook.py.
Ingestion points: User-provided title via the --title CLI argument.
Boundary markers: The title is placed inside a markdown cell, prefixed with '# Experiment:' or '# Tutorial:'.
Capability inventory: The script writes .ipynb files to the local filesystem using json.dump and creates directories using pathlib.
Sanitization: The title is slugified for use in the filename, which prevents path traversal, but the raw input string is interpolated directly into the notebook's markdown source without escaping or validation.

jupyter-notebook