The Agent Skills Directory

[OBFUSCATION]: The file demo/index.html contains the full source for its demo page in a Base64 encoded string. This serves as a container for the complex HTML and CSS required for the design preview.
[DYNAMIC_EXECUTION]: The demo loader in demo/index.html uses the srcdoc attribute to execute the decoded HTML within a sandboxed iframe. This execution is scoped to a limited environment with sandbox="allow-scripts" and a strict Content Security Policy (CSP).
[INDIRECT_PROMPT_INJECTION]: The skill processes text from the DOM using textContent. To ensure safety when re-rendering this text as part of an animation, it employs an escapeHTML helper function to sanitize potential HTML special characters.
Ingestion points: element.textContent in the splitMaskedReveal function.
Boundary markers: None; the logic treats the input as literal text strings.
Capability inventory: The script modifies the DOM structure of target elements and initiates GSAP ScrollTrigger animations.
Sanitization: All text segments are processed by escapeHTML to replace character entities for <, >, &, ", and ' before being assigned to innerHTML.

masked-reveal