The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The shell script scripts/playwright_cli.sh uses npx to fetch and execute the @playwright/cli package from the npm registry. This is the official and trusted CLI tool provided by Microsoft for the Playwright framework.
[INDIRECT_PROMPT_INJECTION]: The skill enables the agent to browse and interact with external websites, which creates a surface for indirect prompt injection attacks where a website could contain hidden instructions designed to manipulate the agent's behavior.
Ingestion points: Information is ingested into the agent context via browser snapshots and command evaluation results (snapshot and eval commands).
Boundary markers: The skill does not use explicit boundary markers to separate external data from system instructions.
Capability inventory: The skill provides significant interaction capabilities, including clicking elements, filling forms, and executing JavaScript, as well as the ability to save screenshots and traces to the local filesystem.
Sanitization: No sanitization or filtering is applied to the content retrieved from external pages.
[DYNAMIC_EXECUTION]: The skill provides eval and run-code commands as documented in references/cli.md and references/workflows.md, which allow the agent to execute dynamically generated JavaScript code within the browser context for UI interaction.

playwright