The Agent Skills Directory

[DYNAMIC_EXECUTION]: The scripts/package-loader.mjs script manages the runtime installation and loading of Node.js dependencies using npm install and dynamic import(). It targets specific versions of @hyperframes/producer, @hyperframes/core, and sharp. The loader includes security-focused logic such as version pinning and the use of the --ignore-scripts flag to prevent the execution of malicious package lifecycle scripts.
[COMMAND_EXECUTION]: The skill executes external system commands to perform its primary tasks. Specifically, scripts/extract-audio-data.py uses subprocess.run to call ffmpeg for audio decoding and frequency analysis, while scripts/contrast-report.mjs manages a browser-based capture session to evaluate visual contrast.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data (e.g., headlines, sublines) and interpolates it into HTML templates and CSS properties in references/design-picker.md and references/prompt-expansion.md. Documentation indicates awareness of injection risks, such as XSS within templates, and provides guidelines for safe interpolation, though the surface for malicious content processing exists.

hyperframes-creative