The Agent Skills Directory

[OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string assigned to encodedHtml. This string encodes a full HTML document including scripts and styles, which conceals the demo's implementation from plain-text analysis.
[DYNAMIC_EXECUTION]: The skill uses a script in demo/index.html to decode the encodedHtml string at runtime using atob() and TextDecoder(). The resulting HTML is then dynamically injected into a sandboxed iframe via the srcdoc property.
[INDIRECT_PROMPT_INJECTION]: The demo/PROMPT.md file defines a workflow that ingests external data, such as product briefs and content anchors, to populate the generated UI. This represents an attack surface where instructions embedded in processed data could influence agent behavior, though the skill's capabilities are limited to UI generation.
[EXTERNAL_DOWNLOADS]: The demo configuration in demo/source.json and the decoded HTML content reference external dependencies from well-known services, including Cloudflare (GSAP), Supabase (image storage), Tailwind (CSS), and Iconify. These are standard resources for web development.

marquee-loop