The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads pinned dependencies from the npm registry using a manual setup script (scripts/setup.sh). Additionally, Puppeteer downloads a specific version of Chromium for Testing from Google's official download service. These are documented, standard operations for the tool's functionality.
[COMMAND_EXECUTION]: The rendering harnesses (render-anim.mjs, render-video.mjs) use execFileSync to call ffmpeg and ffprobe. These calls are used to extract frames from source videos and stitch rendered images into MP4 files, which is the primary purpose of the skill.
[DYNAMIC_EXECUTION]: The engine executes local p5.js sketches within a headless Chromium instance. This involves injecting script tags and evaluating code at runtime.
Evidence: render-anim.mjs and others use page.addScriptTag to load p5.min.js and the user-selected sketch.
Mitigation: The skill implements a robust sandbox via scripts/lib/page-safety.mjs. It uses Puppeteer's setRequestInterception to block all network requests except for about:, blob:, and data: protocols, preventing the sketches from performing data exfiltration or reaching external URLs.

p5-paint-animation