The Agent Skills Directory

[PROMPT_INJECTION]: The skill is designed to interact with external websites and process user-provided bug reports, creating a surface for indirect prompt injection where malicious content could attempt to influence the agent's behavior during the triage process. * Ingestion points: External web page content accessed via Playwright and free-text user input from reports or tickets. * Boundary markers: The instructions do not specify the use of delimiters or specific warnings to the agent to ignore instructions embedded in the external data. * Capability inventory: The skill utilizes browser automation tools (browser_*) and file system write operations to generate reports and capture evidence. * Sanitization: There are no instructions to sanitize or validate content retrieved from external sources before the agent processes it.
[EXTERNAL_DOWNLOADS]: The skill references the use of @playwright/cli via npx, which involves downloading the package from the public NPM registry. This is a standard procedure for utilizing this well-known browser automation tool.

bug-triage