The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes local shell scripts (start-server.sh, stop-server.sh) to manage the lifecycle of a Node.js companion server. The scripts include logic to handle process IDs, background execution, and clean up resources upon termination.
[COMMAND_EXECUTION]: The Node.js server (server.cjs) is a custom-built implementation using standard libraries. It facilitates HTTP and WebSocket communication to serve design fragments and capture user interactions. The server includes an idle timeout and parent-process monitoring to ensure it does not persist unnecessarily.
[SAFE]: The file-serving logic in the server uses path.basename to sanitize filenames, effectively preventing path traversal attacks when accessing files within the session's content directory.
[SAFE]: The server binds to the local loopback interface (127.0.0.1) by default, ensuring that the visual companion is only accessible from the user's machine unless explicitly configured otherwise by the user for remote environments.

brainstorming