The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill loads well-known libraries including GSAP (3.14.2) and Three.js (0.170.0) from the JSDelivr CDN. These are established, versioned dependencies used for the animation and 3D scene logic. It also fetches fonts from Google Fonts.
[COMMAND_EXECUTION]: Installation and rendering are performed using npx hyperframes. This is a tool-specific command for the HyperFrames framework, used here for its intended purpose of managing and rendering 3D compositions within the vendor's ecosystem.
[DYNAMIC_EXECUTION]: The 3D scene utilizes custom GLSL shaders injected into Three.js materials via onBeforeCompile. This is a standard technique for high-performance graphics like the procedural wind and textures seen in this skill. The code generation is local and restricted to the GPU context.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-defined variables such as headlines and font names. These are rendered to a canvas or used to fetch Google Fonts with appropriate sanitization (escaping quotes and URL encoding), ensuring they cannot break out of their intended display context to affect the agent's behavior.
[SAFE]: All visual assets (textures) are stored locally within the skill's assets folder and loaded via relative paths, minimizing external network requests. All referenced external domains (jsdelivr.net, googleapis.com, gstatic.com, heygen.ai) are well-known services or vendor-owned infrastructure.

canopy-part-title