The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The README.md file instructs users to install the engine using the command curl -fsSL https://install.iii.dev/iii/main/install.sh | sh. Pining a remote script directly into a shell is a dangerous practice that can lead to complete system compromise if the source domain or transport is compromised.
[REMOTE_CODE_EXECUTION]: The skill implements a core feature called 'Injectable UI' which allows external workers to register ESM JavaScript assets via the console:script trigger. The console dynamically imports and executes these scripts at runtime. These scripts run with full console-origin privileges, meaning a malicious or compromised worker can execute arbitrary code in the user's browser context.
[COMMAND_EXECUTION]: The skill documentation describes the execution of various local CLI commands including iii worker add, iii project init, and build scripts like pnpm build. These operations execute code from the local environment and dependencies.
[EXTERNAL_DOWNLOADS]: The project relies on numerous external dependencies from NPM and Cargo registries, as well as the 'iii' tool binaries. While typical for development, these represent a supply chain risk if packages are not strictly versioned and audited.

console-injectable-ui