The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/live-copy-edit-agent.mjs invokes the codex CLI with the --dangerously-bypass-approvals-and-sandbox flag. This pattern is designed to execute commands that circumvent platform-level security checks and sandbox restrictions when applying source code changes.
[PERSISTENCE]: The administrative script scripts/hook-admin.mjs programmatically modifies local environment configuration files, such as .claude/settings.local.json and .codex/hooks.json. It installs persistent hooks that automatically execute skill scripts during project lifecycle events like file edits or session termination, ensuring continuous background activity without user interaction.
[EXTERNAL_DOWNLOADS]: The skill initiates outbound network requests to impeccable.style for version verification, design-concept fetching, and usage telemetry. It also connects to api.openai.com for image generation functionality. These connections are made to domains outside the established list of trusted organizations.
[PROMPT_INJECTION]: The SKILL.md instructions employ persona-redefinition techniques ('Whereas before... you now approach every design task as a award-winning design director...') intended to override the model's default operational boundaries and safety guidelines.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon data from PRODUCT.md and DESIGN.md within the project directory. It lacks explicit boundary markers or instructions to ignore potential commands embedded in these files, creating an attack surface for indirect prompt injection if these files are poisoned.
[DYNAMIC_EXECUTION]: Several components, including scripts/detect.mjs and scripts/live-server.mjs, utilize dynamic module loading and runtime code assembly. scripts/live-server.mjs constructs the live.js browser script by concatenating multiple JavaScript fragments from the disk before serving it to the browser.
[OBFUSCATION]: The skill includes a large, minified JavaScript library (scripts/modern-screenshot.umd.js). Minified code in this context acts as a form of obfuscation that hinders the ability to verify the code being injected into the user's browser environment.

impeccable