The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to install Playwright and download the Chromium browser using npx playwright install chromium. This is a standard operation for the Playwright library from a well-known vendor.\n- [COMMAND_EXECUTION]: The reference.md file includes a utility function getVideoDuration that uses child_process.execSync to invoke ffprobe. While the file path is enclosed in quotes, this pattern can be risky if the input is not strictly validated, as it allows shell command execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for navigating the browser to arbitrary URLs (e.g., in recordDemo and recordNavDemo functions). This creates a surface for indirect prompt injection where malicious website content could attempt to influence the agent's actions during the browser session.\n
Ingestion points: page.goto(url) in SKILL.md and reference.md.\n
Boundary markers: None present.\n
Capability inventory: File system access via fs and shell command execution via child_process.execSync.\n
Sanitization: Basic quoting is used in the ffprobe command, but no comprehensive validation of external content is implemented.

playwright-recording