The Agent Skills Directory

[OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string (encodedHtml) that stores the complete HTML, CSS, and JavaScript payload for the design demo, hiding the implementation from plain-text inspection.
[DYNAMIC_EXECUTION]: The demo harness in demo/index.html decodes the embedded Base64 payload and injects it into an iframe's srcdoc attribute at runtime, executing the contained code in a sandboxed environment.
[EXTERNAL_DOWNLOADS]: The demo environment fetches runtime dependencies including GSAP, Three.js, and Iconify from well-known content delivery networks (Cloudflare, Iconify). It also loads specialized typography from Google's font services.
[INDIRECT_PROMPT_INJECTION]: The instructions in demo/PROMPT.md encourage the agent to ingest external reference content and design specifications from neuform.ai to guide the visual output.
Ingestion points: Reference URL in demo/PROMPT.md (neuform.ai).
Boundary markers: None present in the prompt templates.
Capability inventory: The skill is restricted to generating CSS and HTML structure; no file-system write or shell execution capabilities are present.
Sanitization: No explicit filtering or sanitization of external reference content is implemented.

corner-diagonals