The Agent Skills Directory

[SAFE]: The skill uses local shell scripts and a Node.js server to facilitate design prototyping. These operations are restricted to the local environment and are used for the legitimate purpose of managing the visual companion tool.\n- [SAFE]: The server logic includes robust path sanitization using path.basename to prevent directory traversal attacks when serving files from the content directory.\n- [SAFE]: The server binds to the loopback interface (127.0.0.1) by default, ensuring that the visual companion is only accessible locally. It also features an idle timeout and parent-process monitoring to ensure the server automatically terminates when no longer needed.\n- [SAFE]: Interaction data from the user's browser is handled as structured JSON and stored in a local state file. This data-driven feedback model is well-defined and does not introduce security risks beyond standard agent-user interaction.

brainstorming