The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references several external tools and libraries including Google's Workbox, Lighthouse, and Bubblewrap, as well as community plugins for Vite, Webpack, and Next.js. These are established industry standards for PWA development and are considered safe sources for configuration and auditing purposes.
[COMMAND_EXECUTION]: The instructions include command-line examples for running audits (npx lighthouse) and packaging tools (bubblewrap). These commands are provided as guidance for the user or agent to perform standard development tasks within the project scope.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided URLs and project files (like manifests and service workers). While this presents a theoretical surface for indirect injection if an external website contains malicious instructions, the skill does not possess capabilities that would allow such instructions to escalate privileges or exfiltrate data. Boundary markers are recommended when processing external content.

pwa-quality