The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill automates the installation of several external dependencies and tools.\n
Scaffolding scripts (new-react-deck.sh) download and install Node.js packages including react, framer-motion, lucide-react, and tailwindcss from the npm registry.\n
The PDF export script (export-deck-pdf.py) requires downloading playwright, pillow, and the chromium browser via PyPI and official Microsoft/Playwright sources.\n
The HTML template in new-html-deck.sh fetches Tailwind CSS from cdn.tailwindcss.com at runtime.\n- [COMMAND_EXECUTION]: Automated scaffolding and export scripts perform various system-level operations.\n
new-html-deck.sh and new-react-deck.sh create directories, write files using cat, and use python3 for string manipulation within generated files.\n
export-deck-pdf.py invokes browser automation to navigate pages and capture screenshots.\n- [REMOTE_CODE_EXECUTION]: The skill uses remote initialization tools.\n
new-react-deck.sh executes npm create vite@latest, which fetches and runs code from the npm registry to scaffold projects.\n- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to instructions embedded in the data it processes for slide generation.\n
Ingestion points: The agent receives slide content and narrative descriptions from user prompts (SKILL.md).\n
Boundary markers: The instructions lack specific delimiters or warnings to ignore embedded instructions within the user-provided content.\n
Capability inventory: The skill can write to the file system and execute shell scripts, providing a path for malicious instructions to influence the host environment.\n
Sanitization: User-provided text is interpolated into project templates without explicit sanitization or validation logic.\n- [DYNAMIC_EXECUTION]: The skill uses runtime code evaluation and modification techniques.\n
export-deck-pdf.py uses Playwright's evaluate method to inject and run a JavaScript snippet (REVEAL_JS) within the browser context to adjust slide visibility for export.\n
Scaffolding scripts use heredocs to pass Python code to the interpreter for file editing tasks.

slidewright