The Agent Skills Directory

[SAFE]: The skill converts structured JSON threads into HTML and PNG mockups. All user-supplied text fields are processed through a robust escapeHTML function in generate.js to prevent HTML injection or XSS within the rendering context.
[COMMAND_EXECUTION]: In screenshot.js, the skill uses child_process.execSync to run npx playwright install chromium if the browser is missing. This is a standard setup task for Playwright-based tools and is limited to this specific command.
[EXTERNAL_DOWNLOADS]: The skill triggers the download of the Chromium browser from the official Playwright registry during setup. This is a well-known and trusted source for development tools.
[DATA_EXPOSURE]: The skill operates entirely on local inputs and does not attempt to access sensitive system files or credentials. Output is restricted to a user-defined or default export directory.

create-imessage-mockup