The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes local shell scripts (scripts/tq and scripts/new-canvas) to interact with the tldraw offline application. These scripts use standard system commands like curl and open to manage canvas documents and execute drawing operations.
[DATA_EXPOSURE]: To authenticate with the tldraw application, the skill reads a local configuration file (server.json) to retrieve a session-specific bearer token. This access is localized to the user's application support directory and is required for the skill to function.
[REMOTE_CODE_EXECUTION]: While the skill communicates with a local HTTP server via curl, all network operations are restricted to localhost. This is the intended mechanism for the tldraw bridge and does not involve downloading or executing code from untrusted remote sources.

codebase-map