The Agent Skills Directory

[COMMAND_EXECUTION]: The utility scripts/package-loader.mjs spawns the npm binary to install local dependencies. Although it uses the --ignore-scripts flag and requires a confirmation environment variable or TTY interaction, it performs runtime software management.
[COMMAND_EXECUTION]: The script scripts/extract-audio-data.py uses subprocess.run to execute the ffmpeg utility for extracting audio frequency data from media files.
[COMMAND_EXECUTION]: The design picker workflow documented in references/design-picker.md involves running a background HTTP server using python3 -m http.server to serve selection templates.
[EXTERNAL_DOWNLOADS]: The skill is designed to download Node.js packages such as @hyperframes/producer and sharp from the npm registry at runtime through its bootstrap script.
[REMOTE_CODE_EXECUTION]: Packages installed via the bootstrap utility are loaded into the Node.js process using dynamic import() statements with computed file paths in scripts/package-loader.mjs.
[PROMPT_INJECTION]: The design picker system in references/design-picker.md creates an indirect prompt injection surface by interpolating user-provided architectural data and HTML fragments into a preview template.
Ingestion points: Architecture JSON objects, specifically the preview_html field, processed in references/design-picker.md.
Boundary markers: Data is structured as JSON before being injected into placeholders like {{bg}} in the template.
Capability inventory: The skill possesses command execution (ffmpeg, npm) and network download capabilities.
Sanitization: The documentation provides instructions to avoid <script> tags and event handlers, but the framework itself relies on developer adherence.

hyperframes-creative