The Agent Skills Directory

[COMMAND_EXECUTION]: The skill manages a local visual companion by executing included bash scripts (start-server.sh, stop-server.sh) and a Node.js server process (server.cjs). These commands are limited to process lifecycle management and do not involve untrusted input.
[PROMPT_INJECTION]: The skill is designed to ingest project context such as documentation and source code, creating a surface for indirect prompt injection. This risk is effectively mitigated by the skill's logic, which forces a hard gate requiring user approval of the design before any implementation actions can proceed.
[SAFE]: The visual companion server is a self-contained implementation using built-in Node.js modules. It defaults to the local loopback interface (127.0.0.1) and uses path sanitization (path.basename) to ensure that only files within the designated ephemeral session directory can be accessed.

brainstorming