The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill exhibits a significant attack surface for indirect prompt injection as it is designed to ingest and process untrusted external data.
Ingestion points: The WebsiteToRedesign workflow fetches content (HTML and screenshots) from live URLs provided by the user. The ExtractDesignSystem and IntegrateIntoApp workflows read local project codebases, and ProcessHandoffBundle.ts parses handoff bundles exported from external sessions.
Boundary markers: The skill lacks explicit boundary markers or 'ignore' instructions when feeding these external contents into its internal tools or the downstream frontend-design plugin.
Capability inventory: The skill has extensive local execution capabilities, including file system modification via patch, git, and bun, as well as network operations for deployment through wrangler, vercel, and netlify.
Sanitization: There is minimal sanitization of the content fetched from websites or codebases before it is passed to design and build processes.
[COMMAND_EXECUTION]: Several workflows and tools within the skill execute shell commands to perform their functions.
Deployment Tools: Workflows/DeployDesign.md executes build and deployment commands like bun run build, wrangler pages deploy, vercel deploy, and netlify deploy.
Automation Tools: Tools/DriveClaudeDesign.ts and Tools/VerifyDesign.ts utilize Bun.spawn to wrap the interceptor CLI for browser automation (commands include tree, open, type, click, screenshot).
Integration Tools: Workflows/IntegrateIntoApp.md uses the patch command to apply generated designs as diffs to the user's project.
[EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch external data.
Website Capture: Workflows/WebsiteToRedesign.md uses curl to fetch HTML and screenshots from live URLs to support redesign tasks.
Local Notifications: SKILL.md and Workflows/DirectDesign.md contain curl calls to http://localhost:31337/notify for user-facing voice notifications.

Webdesign