The Agent Skills Directory

[DYNAMIC_EXECUTION]: The script scripts/evaluate.js accepts user input through the --script parameter and directly interprets it inside the browser environment using JavaScript's native eval() function via page.evaluate(). This creates a pathway for executing unrestricted JavaScript inside the automated browser session.
[COMMAND_EXECUTION]: The suite invokes external system executables via child_process.execFileSync inside scripts/screenshot.js to run the magick or convert binaries for automated screenshot compression. Although arguments are securely passed as an array to minimize shell injection vectors, the runtime still depends on invoking processes outside the Node environment.

chrome-devtools