The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill loads the Chart.js library from a well-known CDN service.
Evidence: Script tags in examples/custom-tooltip.html, examples/interactive-legend.html, and examples/responsive-chart.html reference https://cdn.jsdelivr.net/npm/chart.js@4.5.1.
[PROMPT_INJECTION]: The provided example code for custom tooltips and legends is vulnerable to Indirect Prompt Injection (specifically Cross-Site Scripting) because it utilizes .innerHTML to render chart data.
Ingestion points: Data labels and dataset properties entering the context via chart.data in examples/custom-tooltip.html and examples/interactive-legend.html.
Boundary markers: Absent; there are no delimiters or explicit instructions to ignore embedded instructions in the example data rendering logic.
Capability inventory: The examples in examples/custom-tooltip.html and examples/interactive-legend.html perform DOM manipulation to create custom UI elements.
Sanitization: Absent; no escaping or sanitization is performed on external content before it is interpolated into the DOM.

chartjs-configuration