The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses several Python and Swift scripts to perform its primary functions (rendering SVGs, generating PDFs, and processing catalogs). These operations are restricted to processing local design data and use standard libraries.
[DYNAMIC_EXECUTION]: The interactive 3D viewer is generated as a self-contained HTML file. The script render_interactive_html.py embeds the design data into the HTML as a JSON payload, correctly escaping the data to prevent script injection within the generated file.
[DATA_EXFILTRATION]: No network-related commands (curl, wget) or external API calls were detected. All processing of the product catalog and design files is performed locally.
[INDIRECT_PROMPT_INJECTION]: The skill processes external design JSON files. However, the data ingestion is highly structured (schema-based), and the outputs are largely technical (BOMs, SVG coordinates) or sanitized for display (using html.escape), providing a minimal attack surface for natural language prompt injection.
[OBFUSCATION]: Base64 encoding is used in render_interactive_html.py for its intended purpose: embedding local images into a self-contained HTML file to ensure portability. This is a standard practice and not a malicious obfuscation attempt.

ray-aluframe