The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions include the installation of playwright and its browser binaries via pip. Playwright is a well-known and trusted open-source library maintained by Microsoft for browser automation.
[EXTERNAL_DOWNLOADS]: The generated HTML templates utilize standard resources from well-known services, including Google Fonts and the Tailwind CSS CDN, to manage typography and styling.
[COMMAND_EXECUTION]: The skill executes a local Python script skills/shared/scripts/render_card.py to process generated HTML files into final PNG images. This command execution is a core component of the skill's primary functionality for producing visual assets.
[INDIRECT_PROMPT_INJECTION]: The skill functions by ingesting user-supplied text to populate a marketing poster template, creating a potential surface for indirect injection.
Ingestion points: User-provided product descriptions, headlines, and sales points are used to generate the poster's content in SKILL.md.
Boundary markers: The skill does not define specific delimiters or instructions to prevent the agent from obeying instructions that might be embedded in the user-supplied content.
Capability inventory: The skill has the capability to write files to the local outputs/ directory and execute the render_card.py script.
Sanitization: The instructions do not explicitly require the agent to sanitize or escape user-provided strings before they are inserted into the HTML structure.

poster-hero