game-dev-combat-skill-polish

This is a QA screenshot automation script, not evidently malware. It carries meaningful risks when scenario files or environment variables are untrusted: JavaScript injection in the browser context and path traversal leading to recursive deletion. Restrict these inputs and validate output paths before use.