The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill instructs the agent to scaffold a project using npx degit diffusionstudio/lottie and immediately run npm install. This sequence downloads external code and executes it on the local system, including any scripts defined in the package's post-installation lifecycle, which could be used for arbitrary code execution.\n- [EXTERNAL_DOWNLOADS]: The skill relies on an external template from the diffusionstudio/lottie GitHub repository. This unverified third-party source introduces a supply-chain risk where malicious code could be introduced into the local environment.\n- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands such as npm install, npm run dev, and a node -e validation script. Automated execution of these commands, particularly after downloading remote content, presents a risk of system compromise or unauthorized persistent access if the remote repository content is modified or malicious.

text-to-lottie