The Agent Skills Directory

[COMMAND_EXECUTION]: The skill dynamically generates a JavaScript file (scripts/capture-promo.mjs) by analyzing existing project source code and then executes it via Node.js to record gameplay.
[COMMAND_EXECUTION]: The skill uses chmod +x to grant execution permissions to a shell script (convert-highfps.sh) after copying it into the project directory.
[EXTERNAL_DOWNLOADS]: The skill automates the installation of the @playwright/test NPM package and browser binaries (npx playwright install chromium) if they are missing from the environment.
[COMMAND_EXECUTION]: The skill exhibits an indirect prompt injection surface by reading untrusted project data to influence code generation and execution:
Ingestion points: Reads src/scenes/GameScene.js, src/core/EventBus.js, src/core/Constants.js, and src/main.js from the project directory.
Boundary markers: Absent; the skill directly incorporates patterns found in these files into the generated capture script.
Capability inventory: Includes execution of generated Node.js scripts, execution of bash scripts, and subprocess calls to ffmpeg, npm, and npx.
Sanitization: Absent; the skill identifies logic like "death/failure methods" and "input keys" to generate executable logic without validation.

record-promo