The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to scrape and process content from external websites, which creates a potential surface for indirect prompt injection where malicious instructions on a webpage could influence the agent's behavior.
Ingestion points: templates/basic-scrape.ts and templates/stealth-mode.ts ingest data via page.goto() and page.textContent().
Boundary markers: Absent; scraped content is directly processed or logged by the agent.
Capability inventory: File system access (fs.writeFile for screenshots and sessions) and command execution via the agent's environment (npx).
Sanitization: Absent; content is treated as raw text.
[COMMAND_EXECUTION]: The skill includes a bash script scripts/install-browsers.sh that executes package manager commands (npx playwright install) to download and configure browser binaries. This is a legitimate and documented setup procedure for the Playwright framework.
[DATA_EXPOSURE]: The authenticated-session.ts template implements session persistence by saving browser cookies to a local file (session.json). While this is a standard requirement for maintaining login states in automation, users should be aware that these files contain sensitive session tokens.
[EXTERNAL_DOWNLOADS]: The skill facilitates the download of official browser binaries from Microsoft's Playwright infrastructure. It also utilizes well-known community packages like playwright-extra and puppeteer-extra-plugin-stealth to enhance anti-detection capabilities.

playwright-local