The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data from the repository (README, route definitions, and dashboard pages) to suggest content for the pitch deck. This represents an indirect prompt injection surface where malicious instructions in the repository could influence the agent's output.
Ingestion points: SKILL.md Section 3 instructs the agent to read the repository content.
Boundary markers: None identified in the prompt interpolation logic.
Capability inventory: The skill possesses file-writing capabilities (fill.mjs) and network upload capabilities via the slideless push command.
Sanitization: The skill mitigates this risk by requiring the agent to ask the participant to confirm the proposed slide content before writing it to the configuration file.
[DYNAMIC_EXECUTION]: The skill uses dynamic execution techniques to process templates and validate the final deck.
Template Rendering: The scripts/fill.mjs file uses vm.runInNewContext to execute JavaScript code extracted from the template's <script id="deck-render"> block. This allows the template to define its own slide generation logic.
Browser-Side Validation: The scripts/check.mjs file uses page.evaluate and eval() within a Playwright browser instance to execute text-size checking logic on the rendered slides.
[COMMAND_EXECUTION]: The skill executes several external commands and local scripts to perform its tasks.
CLI Tools: It uses the slideless and hackathon CLI tools for workspace management, template initialization, and deck publishing.
Local Scripts: It executes Node.js scripts (fill.mjs and check.mjs) located within the skill's directory.
System Commands: It uses printf to modify .gitignore and open/start/xdg-open to display validation screenshots.
[EXTERNAL_DOWNLOADS]: The skill requires the installation of external software packages.
Slideless Tool: Instructions include installing @antasphere/slideless@latest globally via NPM.
Playwright: The check.mjs script prompts the user to install playwright and its browser binaries into a local cache directory if they are not already present.

hackathon-deck-pitch