The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local shell commands using Node.js and OpenSSL. These commands are used for deck rendering, certificate management for the local server, and starting the preview service.
[EXTERNAL_DOWNLOADS]: During setup, the skill installs Node.js packages and uses Playwright to download Chromium binaries. It also connects to package registries and GitHub to check for updates. All external connections are made to well-known repositories or services.
[INDIRECT_PROMPT_INJECTION]: To protect against malicious user input, the skill implements a strict HTML sanitizer in validate-goal-spec.mjs. It restricts slide content to basic formatting tags and blocks script execution or unauthorized link protocols.
[DYNAMIC_EXECUTION]: The skill uses esbuild at runtime to dynamically bundle theme-specific browser code for presentations. This process uses internal project components and is a standard part of the slide generation pipeline.
[OBFUSCATION]: The vendor library assets/vendor/unicornstudio.umd.js uses Base64 encoding to store UI strings and an internal asset URL. This is used for benign display elements like branding indicators.

dashi-ppt