Function render_untrusted_skill_instructions 

pub fn render_untrusted_skill_instructions(
    skill_name: &str,
    instructions: &str,
) -> String

Render skill instructions as bounded, escaped untrusted resource content.

The returned XML-like fence is deliberately a presentation boundary only; it does not grant the skill any tool, filesystem, or network permission. Escaping prevents instruction content from injecting a second closing fence or arbitrary attributes into the surrounding prompt.