The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes local shell scripts and a Node.js script to launch a visual companion server. This allows the agent to serve HTML-based mockups and diagrams to the user's local browser.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests project context from files and commits, which presents a surface for indirect prompt injection. This risk is addressed through a design-first checklist that mandates human review of specifications before any code implementation begins.\n- [EXTERNAL_DOWNLOADS]: The visual companion interface references a static brand logo from an external domain (primeradiant.com). This is a benign UI asset.\n- [SAFE]: The local server implementation adheres to security best practices, including the use of 32-byte cryptographically secure session tokens, timing-safe authentication checks, WebSocket origin validation, and strict directory traversal prevention using realpath resolution.

brainstorming