The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute standard Playwright CLI commands for browser automation. These operations are essential for its primary function of navigating web applications and interacting with UI elements.
[EXTERNAL_DOWNLOADS]: It references the installation of Playwright and Chromium through the official npx registry. These are well-known development tools used appropriately within a testing context.
[PROMPT_INJECTION]: The skill processes untrusted web content via browser snapshots, which represents an indirect prompt injection attack surface. 1. Ingestion points: Data is ingested via browser snapshots (SKILL.md). 2. Boundary markers: The skill encourages saving data to disk rather than direct context injection, which serves as a mitigation strategy. 3. Capability inventory: The skill has access to Bash and Write tools. 4. Sanitization: No explicit sanitization is described, but the focused QA workflow limits the impact of unexpected instructions.

playwright-cli