The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the playwright Node.js package from the official NPM registry and the Chromium browser binary. These are standard tools from well-known and trusted providers required for the skill's primary functionality.
[COMMAND_EXECUTION]: The script uses execSync and execFileSync to run npm and the Playwright CLI to install these dependencies. The execution is limited to managing the skill's own environment in a local cache directory.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes HTML files provided by the user or found in the environment, which is a potential surface for indirect instructions.
Ingestion points: The scripts/html-to-pdf.mjs script reads HTML files and their assets using readFileSync and serves them via a temporary local HTTP server.
Boundary markers: None present for the HTML content itself.
Capability inventory: The script has the ability to execute shell commands (execSync), read files (readFileSync), and start a local network listener (createServer).
Sanitization: The script implements strict path validation in the local server logic to prevent path traversal attacks, ensuring only files within the target directory can be accessed.
[SAFE]: The skill follows security best practices by isolating its dependencies in a dedicated cache directory (~/.workhub/visuals-playwright) rather than modifying the user's project environment.

html-to-pdf