The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the @temps-sdk/react-analytics package. This is a vendor-owned resource associated with the author 'gotempsh'. The instructions proactively recommend security best practices, including the use of the --ignore-scripts flag to prevent unauthorized execution of lifecycle scripts and the verification of the package integrity hash (sha512-qR2e1nBVc4YXxYAqmBsBpJN4wyGqv3lWh3rD+KPlo0tAQ5OS+dycqLW7W61up+76mFoeLnC1Eu74PIJcCyKoWQ==) during installation.
[INDIRECT_PROMPT_INJECTION]: Implementing session recording functionality creates a surface for indirect prompt injection, as the agent may process data derived from untrusted user interactions and DOM content.
Ingestion points: User interactions and DOM structures captured by the rrweb-based recording mechanism within the React application (referenced in SKILL.md).
Boundary markers: The skill documents configuration parameters such as maskAllInputs, blockClass, and maskTextClass to define privacy boundaries and exclude sensitive data from being recorded.
Capability inventory: The skill documents network capabilities, specifically POST requests to the ingest endpoint at /api/_temps/session-replay to transmit recorded data.
Sanitization: Instructions are provided to use specific CSS classes (rr-block, rr-mask, rr-ignore) to sanitize the recorded data by blocking or masking sensitive elements before they are ingested.

add-session-recording