The Agent Skills Directory

Command Execution: The skill provides instructions to run local development scripts such as node utils/print_versions.js and uses build tools like Maven (mvn) and PowerShell (pwsh) for project tasks. These are standard utilities for managing the Playwright repository.
External Network Operations: A bash script is provided that uses curl to fetch content from playwright.dev to verify link integrity. The script implements basic filtering to ensure it only interacts with the official documentation site.
Indirect Prompt Injection Surface: The skill processes external documentation files which could theoretically contain malicious instructions. This represents a potential attack surface given the skill's ability to execute commands and access the network. However, the risk is mitigated by the structured nature of the tasks and the use of domain-specific filters for network operations. Evidence chain: (1) Ingestion points: release-notes-*.md files in docs/src/. (2) Boundary markers: None. (3) Capability inventory: Subprocess execution of node, mvn, pwsh, curl, and grep. (4) Sanitization: The curl command is preceded by a grep filter that restricts targets to playwright.dev domains.

playwright-release-notes