Aetherviz Master

This skill appears to legitimately describe a generator for interactive lesson HTML and does not request credentials or install anything — good. But SKILL.md contradicts itself: it lists external CDNs (Three.js, KaTeX, Tailwind, D3) yet also mandates a single self-contained HTML with 'zero-dependency' external files. Before installing or using it, consider the following: - Ask the author (or check any implementation) how third-party libs will be handled: will the agent inline minified libraries into the single HTML, or will the generated HTML reference CDN URLs? Inlining produces very large files; referencing CDNs causes network fetches and external trust dependencies. - If the generator references external CDNs, review the exact URLs in the produced HTML and confirm they point to official, pinned versions (no personal servers or shortened URLs). Avoid loading unknown remote scripts in sensitive environments. - If the generator inlines libraries, inspect the produced HTML to ensure no unknown or obfuscated code was embedded (search for eval, data exfil endpoints, suspicious inline script blocks). Run the generated page in a sandboxed browser or VM first. - Because the skill forces a single-file output and forbids any extra explanation, errors or hidden network calls may be harder to detect — test with small example topics first and manually inspect output. Additional info that would change this assessment: explicit, consistent instructions describing whether and how third-party libraries are inlined or referenced (with exact trusted source URLs) would reduce ambiguity and move this toward 'benign'.