The Agent Skills Directory

[OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string (encodedHtml) that represents the complete source code for a design demo. Manual decoding and analysis of this content reveal it to be standard HTML, CSS, and JavaScript using GSAP for UI animations. This method is used by the Neuform platform to package and sandbox demos and does not contain malicious logic.
[EXTERNAL_DOWNLOADS]: The skill configuration in demo/source.json identifies several external dependencies used for the demo's visual assets and runtime libraries. These resources are hosted on well-known and reputable services including Supabase (cloud storage), Tailwind CSS (CDN), Cloudflare's cdnjs (GSAP), and Iconify. These are standard industry tools and represent safe external references.
[INDIRECT_PROMPT_INJECTION]: The skill's workflow involves interpreting design references and product briefs to generate code. While this represents a data ingestion surface, the skill lacks high-risk capabilities such as arbitrary shell execution or persistent file system modifications, minimizing the risk of a successful injection attack.

gooey-blob-system