The Agent Skills Directory

[OBFUSCATION]: The demo/index.html file contains a substantial Base64-encoded string (encodedHtml) that stores the complete HTML structure of the design demo. This technique prevents direct inspection of the demo's source code and embedded scripts in its raw form.
[DYNAMIC_EXECUTION]: The demo's loading script in demo/index.html performs dynamic code assembly. It decodes Base64 data, processes binary asset data into Blobs, and generates Object URLs at runtime to populate a srcdoc iframe. This creates executable content dynamically rather than loading it from static files.
[INDIRECT_PROMPT_INJECTION]: The skill defines a layout system that ingests user instructions and product briefs to generate HTML documents. This ingestion point lacks explicit sanitization or boundary markers to prevent embedded instructions in untrusted data from influencing the agent's code generation behavior. While the demo environment is sandboxed, the capability to generate and execute code based on untrusted input remains an attack surface.
[EXTERNAL_DOWNLOADS]: The skill configuration and demo files reference resources from well-known technology providers, including fonts from Google and Fontshare, and runtime scripts from the Tailwind and Iconify content delivery networks.

nested-container-frames