The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides the user with a command to manually install the chrome-devtools MCP server using npx. This is an administrative setup instruction provided to the user and is not executed automatically or silently by the skill itself.
[EXTERNAL_DOWNLOADS]: The skill navigates to public websites provided by the user to extract visual themes. This is the primary intended function of the skill and does not involve downloading or executing untrusted files on the local system.
[PROMPT_INJECTION]: The skill interacts with content from external websites, such as searching for landmark text or theme toggle buttons. This represents a potential surface for indirect prompt injection (Category 8). However, the skill implements a strict data extraction and normalization workflow, mapping extracted values into a predefined set of design tokens (OKLCH colors and rem-based radii). This structured processing acts as a robust boundary against malicious instructions embedded in the target site's content.
[REMOTE_CODE_EXECUTION]: The skill utilizes the evaluate_script tool to run JavaScript snippets within the browser context of the target website. These snippets are statically defined within the skill's internal documentation and are designed solely for retrieving computed styles and CSS variables. They do not execute arbitrary code derived from the external website.

extract-theme