The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill manages its own dependencies by installing puppeteer-core from the npm registry using npm ci. This process is only triggered if the user provides the --allow-install flag and uses a pinned package-lock.json for integrity.
[COMMAND_EXECUTION]: The Python scripts (animate.py, deck.py) invoke system utilities including node, npm, ffmpeg, and gifsicle via subprocess calls. These are necessary for the skill's core functionality of rendering and encoding video/images.
[DYNAMIC_EXECUTION]: During the animation process, the skill generates CSS keyframes at runtime and injects them into the SVG. Furthermore, it uses Puppeteer to execute JavaScript within a headless Chrome instance to manipulate animation timelines for frame-by-frame capture.
[INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted SVG files. It mitigates risk by performing a pre-parse check for malicious XML entities (<!DOCTYPE, <!ENTITY) and by launching the rendering browser with DNS disabled to prevent data exfiltration.

diagram-animate