The Agent Skills Directory

[OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string (encodedHtml) that decodes to a full HTML document including JavaScript and CSS logic. This technique hides the implementation of the demo from plain-text inspection.
[INDIRECT_PROMPT_INJECTION]: The demo system in demo/index.html is designed to ingest and process untrusted asset data and metadata provided at runtime.
Ingestion points: The demo script listens for neuform-assets-v1 messages from the parent window to hydrate its content with binary data.
Boundary markers: The demo content is executed within an iframe using the sandbox="allow-scripts" attribute and a restrictive Content Security Policy (CSP) defined in the srcdoc header.
Capability inventory: The decoded demo script performs DOM manipulation, asset replacement via Blob URLs, and utilizes GSAP for animations. It also requests runtime scripts from local relative paths.
Sanitization: A Content Security Policy is implemented to restrict the demo's capabilities, including setting default-src 'none' and specifying allowed font and script origins.
[DYNAMIC_EXECUTION]: The demo utilizes iframe.srcdoc to dynamically load and execute the HTML and JavaScript content decoded from the encodedHtml string.

split-layout-technical