The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The script scripts/package-loader.mjs uses dynamic import() to load modules from paths resolved at runtime, enabling the choreography auditing tool to load required vendor components.
[COMMAND_EXECUTION]: The auditing tools can execute npm install to manage dependencies. These operations are restricted to vendor-owned packages and utilize the --ignore-scripts flag to mitigate risks associated with untrusted third-party code.
[EXTERNAL_DOWNLOADS]: The skill triggers the download of the @hyperframes/producer package from the npm registry if it is not found in the local environment.
[PROMPT_INJECTION]: The animation recipes provided in the rules/ directory ingest user-provided text for interpolation into generated code templates. The lack of sanitization instructions for this data represents a potential surface for indirect prompt injection.

hyperframes-motion