The Agent Skills Directory

[SAFE]: The skill performs standard PDF generation tasks using trusted libraries. It processes local JSON configuration files and HTML templates to produce documents.
[REMOTE_CODE_EXECUTION]: The setup.sh script installs the Chromium browser via Playwright's official installer (npx playwright install chromium). This is a standard and expected setup procedure for browser-based PDF generation.
[COMMAND_EXECUTION]: The skill executes node and bash commands locally to run the setup and build processes. These operations are scoped to the project directory and are part of the intended functionality.
[EXTERNAL_DOWNLOADS]: Dependencies (Playwright, pdf-lib) are downloaded from the official NPM registry, which is a standard development practice.
[INDIRECT_PROMPT_INJECTION]: The skill processes JSON configuration data provided by the user to populate the PDF fields. While this is an ingestion point, the output is a static PDF document, and the risk of prompt injection affecting the agent's logic is negligible.

create-avv