The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches the axe-core accessibility auditing library from Cloudflare's cdnjs, a well-known and trusted service for web dependencies.
[COMMAND_EXECUTION]: Executes standard development and testing commands including npm run dev, docker compose, npx lighthouse, and npx axe-cli. These are restricted to the local project environment for the purpose of starting and testing the application.
[DYNAMIC_EXECUTION]: Uses cmux_browser with an eval action to inject the axe-core library and run audits within the browser context. The skill explicitly recommends using Subresource Integrity (SRI) to ensure the integrity of the injected script.
[INDIRECT_PROMPT_INJECTION]: The skill processes web application content (DOM, console errors) which could theoretically contain malicious instructions. However, the risk is mitigated as the skill uses structured reporting and specific testing tools (axe, Lighthouse) rather than raw prompt interpolation, and the impact is limited to the QA report output.

qa-testing