The Agent Skills Directory

[SAFE]: The implementation reference emphasizes using textContent instead of innerHTML for displaying narration text, which is an effective mitigation against Cross-Site Scripting (XSS) vulnerabilities.
[SAFE]: The keyboard control logic includes specific checks to bail out when the user is interacting with form elements (INPUT, TEXTAREA, SELECT), preventing the demo from hijacking standard browser interactions.
[DYNAMIC_EXECUTION]: The executeAction function in the implementation reference includes a call action that can execute globally scoped functions on the window object. This is a standard integration feature for this type of skill and is restricted to existing global functions within the application's context.

guided-demo