The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The examples in references/EXAMPLES.md fetch resources from several external providers. The Tweemoji component imports the twemoji-parser library from jspm.dev and uses SVG assets from Cloudflare's CDN. The Notes component loads custom typography from Google Fonts. Additionally, multiple components use default images hosted on the vendor's own domain (framerusercontent.com).
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The CookieBanner component (in references/EXAMPLES.md) accepts a message property and the Notes component accepts a note property, both of which are user-supplied strings from the Framer interface.
Boundary markers: No explicit markers or instructions are used to delimit user-provided text from the rest of the component's internal logic or to warn the agent about embedded instructions.
Capability inventory: The components are limited to standard React UI functionality, animation via Framer Motion, and browser-side state management. There are no capabilities for file system access, shell command execution, or sensitive network operations.
Sanitization: Standard React JSX escaping is present, which prevents script execution in the browser but does not provide semantic filtering for natural language instructions that might target an AI agent.

framer-component-best-practices