The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill instructs the agent to execute npx getdesign@latest add <slug> in the styling workflow. This command downloads and runs code from a remote package registry at runtime without version pinning or source verification.
[COMMAND_EXECUTION]: The skill uses multiple shell commands including mkdir -p, cd, and open to manage directories and preview generated HTML files. These commands are executed directly on the host system.
[EXTERNAL_DOWNLOADS]: The use of npx triggers a network download of external executable code from the npm registry during the skill's execution.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied descriptions and 'slugs' which are directly interpolated into shell commands.
Ingestion points: User descriptions and brand style 'slugs' provided as input (documented in SKILL.md).
Boundary markers: None identified; untrusted data is processed directly.
Capability inventory: File system writes, directory creation (mkdir), and remote code execution (npx).
Sanitization: No validation or sanitization of the user-provided <slug> is performed before it is passed to the npx command shell.

space-chart-html-plus