The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The script downloads playwright-core from the official NPM registry if it is not already available on the system. This is a well-known package used for browser automation and is treated as a safe dependency in this context.
[COMMAND_EXECUTION]: Uses execSync to run npm install for dependency management and npm root -g to locate global packages. These operations are limited to the skill's operational setup and are not used for arbitrary command execution.
[SAFE]: The skill implements several industry-standard security practices:
Manual Authentication: The browser opens for the user to sign in themselves, preventing the agent from ever handling or knowing the user's password.
Least Privilege Storage: Captured session cookies are stored in a studio.env file with restrictive file permissions (chmod 600) and the file is automatically added to .gitignore to prevent accidental inclusion in version control.
Data Masking: Sensitive session tokens are masked in console output (e.g., ****ab12), showing only the last few characters to verify connectivity without exposing the full secret.

iblai-api-studio-auth