The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The script scripts/render.ts contains an ensurePackage function that dynamically downloads and installs the beautiful-mermaid package from public registries (NPM or Bun) if it is not found locally. This dependency is not version-pinned, which introduces a supply chain risk.
[COMMAND_EXECUTION]: The ensurePackage function in scripts/render.ts utilizes child_process.execSync to run shell commands such as npm install and bun add. These commands are executed at runtime to modify the agent's environment.
[EXTERNAL_DOWNLOADS]: Both scripts/render.ts and scripts/create-html.ts utilize npx tsx in their shebang headers, which triggers the dynamic retrieval and execution of the tsx package from the NPM registry if it is not available in the local cache.
[COMMAND_EXECUTION]: The workflow described in SKILL.md requires the agent to execute multiple CLI tools and shell commands, including bun, npx, deno, and agent-browser, to manage the diagram rendering and capture process.
[DATA_EXFILTRATION]: The instructions in SKILL.md and the arguments used in scripts/render.ts (e.g., --allow-net in the Deno example) indicate that the skill requires network access to external resources during the rendering phase.

beautiful-mermaid