The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends installing the @webos-tools/cli package globally via NPM. This package appears to be a third-party wrapper rather than the official LG webOS TV CLI, which is usually distributed as a standalone installer from the LG Developer site.
[COMMAND_EXECUTION]: Instructions include the use of ares-novacom to retrieve SSH keys from the TV and ares-setup-device for environment configuration. These are standard development procedures but involve handling sensitive device credentials.
[EXTERNAL_DOWNLOADS]: The skill provides links to github.com/webOS-TV-app-samples, which is an external repository not verified as an official vendor source.
[INDIRECT_PROMPT_INJECTION]: The skill provides templates for 'Hosted Web Apps' that perform a client-side redirection to a remote URL via window.location.href. This creates a surface where an agent might be instructed to point an app at a malicious domain if the placeholder is not properly replaced.
Ingestion point: index.html template in SKILL.md and references/hosted-app-setup.md.
Boundary markers: Absent.
Capability inventory: App packaging (ares-package), installation (ares-install), and launch (ares-launch) commands.
Sanitization: Absent.

webos-tv