The Agent Skills Directory

[OBFUSCATION]: The demo/index.html file contains a large Base64 encoded string (encodedHtml) that bundles a complete HTML document, including a Content Security Policy and asset loading scripts. This technique obscures the source code of the demo from direct inspection.
[INDIRECT_PROMPT_INJECTION]: The splitMaskedReveal function in SKILL.md reads text directly from the document using element.textContent.trim(). This ingested data is then manipulated to create animation elements.
Ingestion points: element.textContent.trim() in SKILL.md.
Boundary markers: Absent.
Capability inventory: DOM manipulation (innerHTML) and animation (GSAP).
Sanitization: Employs escapeHTML to escape HTML special characters.
[EXTERNAL_DOWNLOADS]: The demo/source.json and demo/index.html files reference external resources from well-known and trusted providers, including Google Fonts, Cloudflare, and Iconify. These references facilitate the retrieval of necessary styles and scripts for the demonstration.

masked-reveal