The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes scripts that launch a headless Chrome browser via Puppeteer to navigate web applications and capture rendered DOM states. It also utilizes Babel to parse and transform JSX/React components into static HTML.
[EXTERNAL_DOWNLOADS]: The snapshot.ts and extract_inline_html.ts scripts fetch remote images and assets to inline them as base64 data URIs. The extract_inline_html.ts script includes a dedicated isSafeUrl function to mitigate SSRF (Server-Side Request Forgery) by blocking requests to private or internal network addresses. The changelog also notes that support material was synchronized from a public Google repository.
[DYNAMIC_EXECUTION]: The snapshot.ts script supports a --auth-script flag which uses dynamic import() to load and execute user-provided JavaScript/TypeScript files for authentication logic.
[SAFE]: The skill demonstrates high security awareness through robust input validation, Regex escaping for user patterns (ReDoS prevention), and atomic file handling in post_process.ts to ensure data integrity. The agent instructions enforce a 'human-in-the-loop' model by requiring explicit user approval before launching servers or running snapshot scripts.

stitch-extract-static-html