The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill documentation instructs the installation and execution of the paprika3d npm package using npx -y, which involves downloading and running code from an unverified third-party source.
[DYNAMIC_EXECUTION]: The perf tool supports a code parameter within the variants option, allowing the execution of arbitrary JavaScript against the renderer and scene objects.
[INDIRECT_PROMPT_INJECTION]: The skill profiles data from external Three.js/WebGL web pages, creating a vulnerability surface where malicious site content could influence the agent.
Ingestion points: Performance data and scene graph metadata (names, groups, triangle counts) from external URLs processed by the perf tool.
Boundary markers: No delimiters or safety instructions are provided to separate external scene data from the agent's instructions.
Capability inventory: The skill possesses the capability to write to the local filesystem (game-runtime.json) and execute dynamic code snippets.
Sanitization: There is no evidence of sanitization or filtering applied to data ingested from external web sources.
[COMMAND_EXECUTION]: The documentation provides specific shell commands (npx) to set up the profiling environment, which the agent may be expected to execute.
[REMOTE_CODE_EXECUTION]: The recommendation to use npx -y for package setup constitutes a remote code execution pattern, as it fetches and executes an external package in a single step.

threejs-perf