The Agent Skills Directory

[OBFUSCATION]: The file demo/index.html contains a significant Base64-encoded payload in the encodedHtml variable. This payload decodes to an entire HTML document including embedded JavaScript, which effectively hides executable code from static text analysis tools.
[DYNAMIC_EXECUTION]: The application logic in demo/index.html decodes the Base64 payload at runtime and assigns it to an iframe's srcdoc property. This method allows for the dynamic execution of generated content within the browser environment.
[INDIRECT_PROMPT_INJECTION]: The skill's workflow in demo/PROMPT.md involves the agent ingesting and analyzing the demo/index.html file as a reference for UI recreation. This ingestion of a complex, script-bearing HTML file represents a surface for potential indirect prompt injection, though no malicious instructions were observed in the current version.
[EXTERNAL_DOWNLOADS]: The skill relies on external runtime dependencies for UI components, including Tailwind CSS, GSAP, Three.js, and Iconify. These are referenced in demo/source.json and loaded from well-known services such as Cloudflare, Google, and Tailwind's official CDN.

company-logos