The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute several Node.js scripts included in its distribution, such as resolve-context.mjs, styleseed-doctor.mjs, and migrate-project.mjs, to perform design rule compilation and health checks.
[DYNAMIC_EXECUTION]: Internal scripts like compiler.mjs and styleseed-doctor.mjs use dynamic import() statements to load sibling modules (e.g., palette-generator.mjs, distribution-integrity.mjs) based on paths calculated relative to the installation directory. The styleseed-doctor.mjs script also utilizes spawnSync to execute the resolve-context.mjs script for validation purposes.
[EXTERNAL_DOWNLOADS]: The catalog.json metadata references a version manifest hosted on styleseed-demo.vercel.app. Vercel is a well-known service, and this reference is used for distribution tracking rather than runtime code execution.
[INDIRECT_PROMPT_INJECTION]: The skill processes project-level configuration files (such as STYLESEED.md and .styleseed/project.json) and compiles them into an 'Effective Rule Bundle' (Markdown). The agent is then instructed to read this bundle to guide its implementation work. While this is an attack surface, the scripts employ strict JSON parsing and regular expression validation (e.g., SAFE_ID, text() length limits) to mitigate risk.

ss-resolve