The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to execute framework initialization and update scripts from the Fresh framework registry via jsr:@fresh/init and jsr:@fresh/update.
[COMMAND_EXECUTION]: Multiple shell commands are used for project setup and development workflows, including deno create, deno install, deno run, and deno task.
[PRIVILEGE_ESCALATION]: The skill frequently recommends using the -A (Allow All) flag with deno run and deno task commands, which grants the process full access to the file system, network, and environment variables.
[DYNAMIC_EXECUTION]: The Fresh framework configuration demonstrated in main.ts utilizes dynamic import() calls with template literals (./islands/${path}) to load routes and interactive components based on the file system structure.
[INDIRECT_PROMPT_INJECTION]: The skill describes a framework for building web applications that ingest and render external data, which is a common attack surface for indirect injections.
Ingestion points: Data is ingested via fetch() calls in handlers (e.g., routes/posts.tsx) or via database queries in async components.
Boundary markers: Relies on standard JSX/TSX escaping provided by the Preact library within the Fresh framework.
Capability inventory: Server-side handlers can perform arbitrary network requests and access persistent storage or environment variables.
Sanitization: The framework provides default XSS protection through JSX; however, the skill does not detail specific sanitization logic for complex external payloads.

deno-frontend