The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local shell scripts (scripts/start-server.sh, scripts/stop-server.sh) and starts a Node.js process to run a visual brainstorming companion server. The server is designed to monitor its parent process and automatically shut down if the parent exits or after 30 minutes of inactivity.
[SAFE]: The local web server binds to the loopback interface (127.0.0.1) by default, restricting access to the local machine. The server's file handling logic uses path.basename to prevent directory traversal attacks when serving session assets.
[SAFE]: The skill instructions include an explicit hard gate forbidding the modification of production code or the invocation of implementation workflows during the planning phase, ensuring the agent stays within the intended brainstorming scope.
[SAFE]: The visual companion's HTML templates and scripts are self-contained and do not load external resources, mitigating risks related to remote code execution or tracking.

spark