The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests game state data (e.g., diagnostics, telemetry) from external web pages, representing a typical attack surface for indirect prompt injection common to browser automation tools.
Ingestion points: The bot playtest script (scripts/bot-playtest.mjs) reads data from window.__GAME_DIAGNOSTICS__ and interacts with window.__GAME_TEST_HOOKS__ in the browser context.
Boundary markers: Data is collected as JSON via the vg playtest eval command and processed by the Node.js script before being returned to the agent context.
Capability inventory: The skill can execute shell commands, navigate a browser, interact with UI elements, execute JavaScript in the browser context, and capture screenshots.
Sanitization: Input values for the bot script are validated against numeric or whitelisted string constraints, and JavaScript strings for evaluation are constructed using JSON.stringify for safe interpolation.
[DYNAMIC_EXECUTION]: The skill dynamically generates and executes JavaScript code within the browser environment to facilitate deep interaction with game engines.
Evidence: The playtest harness constructs JavaScript snippets at runtime to sample frame state, track player metrics, and simulate user input (scripts/bot-playtest.mjs).
Context: These executions occur within the target web page's context via the automation CLI and are a core component of the skill's intended functionality.
[COMMAND_EXECUTION]: The skill provides the ability to run shell commands and scripts for browser automation and playtesting.
Evidence: The skill documentation and scripts involve executing the vg CLI tool and a bundled Node.js progression bot to perform automated testing tasks.
[EXTERNAL_DOWNLOADS]: The skill relies on the vg CLI tool, which downloads the agent-browser automation tool from Vercel Labs on first use.
Evidence: SKILL.md notes that vg installs the browser and automation CLI automatically.
Trust: The download originates from a well-known and trusted organization, representing standard behavior for browser automation tooling.

playtest