The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the vplan CLI for rendering MDX files, performing quality checks (vplan check), and initiating interactive review sessions. These are the primary, intended purposes of the skill for visual communication and project management.
[REMOTE_CODE_EXECUTION]: While the documentation mentions npx playwright install chromium as a fallback for PDF/JPG exports, this is a well-known, standard utility operation from a trusted registry (NPM) for providing headless browser functionality and is considered safe within this context.
[PROMPT_INJECTION]: There are no instructions intended to bypass safety guidelines. The skill includes standard instructional language for structuring plans.
[DATA_EXFILTRATION]: No patterns of accessing sensitive local credentials (AWS, SSH) or exfiltrating data to external servers were detected. The network operations are limited to local server hosting for plan previews and reviews.
[TRUST-SCOPE-RULE]: The skill references standard technology tools and exports (HTML, PDF, JPG) and mentions standard developer ecosystems (Playwright/NPM), which are treated as safe well-known services.

visual-plan