The Agent Skills Directory

[OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string (encodedHtml) which holds the HTML content for the design demo. This is a functional implementation detail used to package and serve a sandboxed demo within a single document.
[DYNAMIC_EXECUTION]: The skill utilizes an iframe with the srcdoc attribute to dynamically load and render the decoded demo HTML. Security is maintained by using the sandbox="allow-scripts" attribute on the iframe to restrict the execution environment.
[EXTERNAL_DOWNLOADS]: The skill and its demo reference scripts and assets from well-known and trusted organizations. This includes GSAP and ScrollTrigger from Cloudflare's CDN, Iconify for iconography, Tailwind CSS for styling, and Google Fonts for typography. Design assets are hosted on Supabase, which is a recognized service provider.
[INDIRECT_PROMPT_INJECTION]: The core logic in SKILL.md implements a custom escapeHTML function to sanitize textContent before it is processed and re-inserted into the DOM via innerHTML. This proactively mitigates risks associated with processing untrusted data that might contain malicious instructions or markup.

masked-reveal