The Agent Skills Directory

[OBFUSCATION]: The file demo/index.html contains a significant portion of its logic within a large Base64 encoded string assigned to the encodedHtml variable. This encoded payload decodes to a full HTML document including JavaScript and CSS, which is then executed within a sandboxed iframe.
[DYNAMIC_EXECUTION]: The skill performs dynamic assembly and execution of code in demo/index.html. It uses the srcdoc property to load content decoded from Base64 at runtime. Additionally, it uses URL.createObjectURL and Blob to dynamically inject assets into the document based on data received via cross-window messaging.
[INDIRECT_PROMPT_INJECTION]: The design instructions in demo/PROMPT.md encourage the agent to process data from external websites (neuform.ai) to influence the generation of HTML and CSS. This introduces a surface where third-party content can affect the agent's output.
[EXTERNAL_DOWNLOADS]: The demo implementation fetches runtime dependencies and visual assets from external domains, including Supabase and Cloudflare. These are legitimate infrastructure components for the design system demo.

high-contrast-skeuomorphic-clean