The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/pwrun utility uses the subprocess module to execute npx commands for toolchain checks and test delegation. These calls are implemented using argument lists to avoid shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill documents the installation of Playwright browsers and Node.js dependencies using npx playwright install and npm ci. These downloads originate from trusted registries and official distribution channels for Playwright.
[INDIRECT_PROMPT_INJECTION]: The pwrun report command ingests Playwright JSON reports to provide summaries for agent triage. This represents a potential surface where malicious output from a compromised test suite could attempt to influence agent instructions, though the risk is mitigated by the skill's operational guardrails and focus on structured summaries.

playwright