The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The SKILL.md file contains a link to https://webperf-snippets.net/CLI. This domain has been identified as a phishing site by automated scanners.
[COMMAND_EXECUTION]: The instructions prompt the user to run shell commands including npx webperf-snippets and npm install. Executing commands recommended by a skill associated with a flagged phishing domain is highly risky.
[REMOTE_CODE_EXECUTION]: The recommendation to use npx webperf-snippets involves downloading and running code from a remote registry. This pattern is dangerous when the associated project's primary domain is flagged for malicious activity.
[EXTERNAL_DOWNLOADS]: Multiple scripts, including Image-Element-Audit.js and SVG-Embedded-Bitmap-Analysis.js, utilize the fetch API to request resources from external URLs found during the page audit. These network operations are executed in the context of the agent's browser environment.

webperf-media