The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The template is designed to fetch and execute a JavaScript bundle from a remote URL on GitHub Pages. This allows the application to update its web-based UI dynamically by loading new code from the remote server at runtime.
[DYNAMIC_EXECUTION]: The skill uses dynamic HTML and JavaScript generation to wrap web components. It utilizes the flutter_inappwebview library to inject event listeners and create a communication bridge between the web environment and the native Flutter layer using string-interpolated templates.
[EXTERNAL_DOWNLOADS]: The guide includes instructions to download and install third-party packages from standard registries, including lit, vite, and flutter_inappwebview via npm and flutter pub.
[INDIRECT_PROMPT_INJECTION]: The architecture creates a communication channel from a webview to native code, representing a potential vulnerability surface.
Ingestion points: Data enters the native context through addJavaScriptHandler in web_component.dart when the webview content triggers an event.
Boundary markers: There are no explicit boundary markers or security warnings to distinguish between trusted and untrusted inputs within the web-to-native bridge.
Capability inventory: The bridge allows the webview to trigger native functions, such as the ScaffoldMessenger SnackBar defined in main.dart.
Sanitization: The implementation lacks sanitization; the onPressed callback receives raw arguments directly from the JavaScript environment without validation.

lit-and-flutter