The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs the pdf-parse package from the npm registry to facilitate text extraction from PDF files during the prototype generation process.
[EXTERNAL_DOWNLOADS]: The skill's documentation suggests the installation and use of well-known third-party tools and services, including Cloudflare Tunnel (cloudflared), Surge.sh, and Vercel, for the purpose of hosting and sharing the generated HTML prototypes.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it analyzes the content of untrusted documents to determine the layout and logic of the code it generates.
Ingestion points: The skill reads .pdf, .txt, and .md files provided by the user or found in the screen-design/ workspace folder.
Boundary markers: No specific delimiters or safety instructions are implemented to prevent instructions embedded within those documents from influencing the agent's behavior.
Capability inventory: The skill utilizes Bash Read and Bash Write tools to create the prototype files and executes a Node.js script to process document content.
Sanitization: There is no evidence of content sanitization or validation performed on the text extracted from the input documents before it is used for analysis and code generation.

html-prototype