The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill includes a helper script, animation-map.mjs, which can dynamically install necessary Node.js packages (@hyperframes/producer, @hyperframes/core) from the official npm registry. This process uses the --ignore-scripts flag to prevent execution of malicious lifecycle scripts and requires interactive user confirmation or an explicit environment variable setting.
[EXTERNAL_DOWNLOADS]: The documentation and code snippets reference established third-party libraries (e.g., GSAP, Anime.js, Three.js) and text animation skills. These are fetched from well-known content delivery networks (CDNs) like jsdelivr.net and unpkg.com or referred to as external agent skills.
[DYNAMIC_EXECUTION]: The skill utilizes a custom loader, package-loader.mjs, to manage the execution environment for its auditing tools. This includes the ability to bootstrap a temporary Node.js environment to run analysis scripts with their required dependencies in isolation.
[INDIRECT_PROMPT_INJECTION]: The skill analyzes composition directories and GSAP timelines. It contains no evidence of processing unvalidated external data that could be interpreted as agent instructions. The analysis logic is restricted to technical instrumentation and animation measurements.
[SAFE]: No instances of prompt injection, data exfiltration, hardcoded credentials, or unauthorized privilege escalation were detected across the analyzed files.

hyperframes-animation