The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill declares dependencies on standard and well-known packages including busabase-sdk, hono, and @hono/node-server. These are used for platform integration and serving the application.
[COMMAND_EXECUTION]: The skill includes management scripts (setup.mjs, publish_airapp.mjs) intended for the developer to initialize and deploy the application to the Busabase environment. These scripts use the busabase-sdk to perform authenticated API operations.
[INDIRECT_PROMPT_INJECTION]: The application features a QA review queue where users can enter notes and verdicts.
Ingestion points: User input is captured via a textarea in the review UI (studio-views.js).
Boundary markers: Data is stored as structured records in a Busabase Base (qa-decisions).
Capability inventory: The skill has capabilities to read/write records in its specific Busabase folder.
Sanitization: The skill consistently applies an esc() function (HTML entity encoding) to user-supplied content before rendering it in the UI, effectively mitigating cross-site scripting and injection risks.
[DYNAMIC_EXECUTION]: The demo-visuals-data.js script dynamically generates SVG data URLs to provide placeholder images for the demo mode. This generation is restricted to UI visual elements and does not involve executing external code.

kelly-digital-human