The Agent Skills Directory

[COMMAND_EXECUTION]: The skill manages a local Node.js server using shell scripts (scripts/start-server.sh and scripts/stop-server.sh). The server provides the 'Visual Companion' interface and binds to 127.0.0.1 by default.
[DYNAMIC_EXECUTION]: The agent dynamically generates HTML and JavaScript content for the browser-based companion to visualize UI mockups and architecture diagrams. This content is served from a temporary session directory.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The skill explores existing project context by reading local files, documentation, and commit history.
Boundary markers: The process lacks explicit boundary markers for untrusted project data, instead using a multi-turn dialogue to validate requirements.
Capability inventory: The skill can write design documents (specs), execute local shell scripts to manage its server, and generate interactive HTML screens.
Sanitization: There is no explicit sanitization of the project context, though the requirement for user approval at multiple stages (clarifying questions, design presentation, spec review) serves as a functional control.

brainstorming