The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data (such as user feedback exports, GitHub repositories, Figma files, and CSV/JSON datasets) to generate design artifacts, research findings, and code. This creates a surface for indirect prompt injection if those sources contain malicious instructions.
Ingestion points: built-in-skills/data-science.md, built-in-skills/import-from-github.md, built-in-skills/import-from-figma.md, and built-in-skills/data-visualization.md.
Boundary markers: Present in instructions like ask-the-user.md which warns the agent not to trust strings verbatim, and chart-stage.js which uses explicit delimiters for tooltips.
Capability inventory: The skill possesses significant capabilities, including shell command execution (via Bash), file system writing (Write), and headless browser automation (Playwright).
Sanitization: chart-stage.js includes a _stripActiveContent method specifically designed to sanitize HTML content in chart tooltips.
[DYNAMIC_EXECUTION]: The skill uses dynamic code generation and execution patterns to implement its design system compilation and automated capture features.
JSX Transpilation: agents/compile-design-system.mjs uses a vendored Babel instance to transpile component code into a runtime bundle.
Sandbox Execution: agents/build-preview.mjs utilizes new Function to execute card-specific scripts within a proxy-based sandbox to isolate them for the preview page.
Automated Navigation: agents/gen-pptx and agents/gen-video execute navigation scripts (provided via showJs or bridgeGlobal) in a headless browser to automate slide transitions and frame captures.
[EXTERNAL_DOWNLOADS]: The skill utilizes well-known CDNs to manage and fetch its dependencies at runtime.
Evidence: built-in-skills/3d-object.md uses an importmap with subresource integrity hashes for Three.js. agents/build-preview.mjs is configured to download Babel and React UMDs from unpkg.com if they are not available in the local vendor cache.
[COMMAND_EXECUTION]: To provide its functionality, the skill frequently executes shell commands to run compilers, renderers, and local HTTP servers.
Evidence: references/claude.md and references/cursor.md document the use of Shell/Bash to run the gen-pptx and gen-video CLIs and to serve the project's designs/ directory using Python's built-in server module.

copilot-design