The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches the PlayCanvas Engine and Ammo.js physics library from the jsDelivr CDN, a standard practice for web-based 3D applications. These are official, versioned releases from a recognized service.
Evidence: Found in assets/starter_playcanvas/index.html (PlayCanvas v2.20.0) and scripts/project_generator.py (Ammo.js v0.0.10).
[COMMAND_EXECUTION]: Includes Python utility scripts (scripts/component_builder.py and scripts/project_generator.py) that perform local file system operations to generate project boilerplate and script components.
Evidence: These scripts use os.makedirs and file write operations in the user-specified output directory.
[INDIRECT_PROMPT_INJECTION]: The included generation scripts represent a surface area for indirect injection as they process external inputs (component names, types, and paths) and incorporate them into generated source files.
Ingestion points: Command line arguments and interactive user input handled by the scripts/ directory.
Boundary markers: None present.
Capability inventory: File system write operations via Python built-in functions.
Sanitization: Basic alphanumeric validation is performed on component names in component_builder.py.
[DYNAMIC_EXECUTION]: The scaffolding tools perform template-based generation of JavaScript ESM components and HTML files, facilitating the creation of executable content at runtime based on user configuration.
Evidence: scripts/component_builder.py generates .mjs components based on provided templates.

playcanvas-engine