The Agent Skills Directory

[SAFE]: The skill is a specialized audit utility for web privacy and compliance. It observes runtime behavior of websites to provide an inventory of trackers and storage items.
[EXTERNAL_DOWNLOADS]: The references/official-sources.md file contains links to well-known and trusted regulatory organizations (e.g., EUR-Lex, FTC, W3C, ICO, OAIC). These are official sources for legal text and accessibility standards and do not pose a security risk.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites via the observe-runtime.mjs script. While this is a potential attack surface for indirect injection, the skill lacks dangerous output capabilities (like writing to the filesystem or executing commands based on that content), and the processing is scoped to auditing storage and network requests.
[DYNAMIC_EXECUTION]: The skill utilizes page.evaluate through Playwright to run inspection scripts within a headless browser context. This is restricted to the browser environment for the purpose of data collection and does not extend to the host system.

cookie-and-storage-audit