The Agent Skills Directory

[DYNAMIC_EXECUTION]: The run-code and eval commands allow the agent to execute arbitrary JavaScript code within the browser context, which can be used to manipulate page state, bypass client-side security, or access data not exposed through standard DOM APIs.
[INDIRECT_PROMPT_INJECTION]: The skill interacts with external web pages which may contain malicious instructions hidden in the DOM. It specifically encourages using 'WebMCP' tools which are provided directly by the untrusted web pages being browsed.
Ingestion points: playwright-cli snapshot, playwright-cli find, webmcp-list, and webmcp-call ingest content and schemas directly from external web pages into the agent's context.
Boundary markers: The documentation includes a conceptual warning to treat page-provided tools as untrusted, but no technical boundary markers or 'ignore embedded instructions' prompts are enforced.
Capability inventory: The skill has access to shell commands (Bash), file system writes (state-save, screenshot, video-start), and full network access through the browser environment.
Sanitization: There is no mention of sanitization or filtering of external content before it is processed by the agent.
[CREDENTIALS_UNSAFE]: The skill provides explicit functionality to extract and manage sensitive session data. Commands such as cookie-get, localstorage-get, and sessionstorage-get can expose session identifiers, while state-save writes the entire authenticated browser state to a local JSON file.
[EXTERNAL_DOWNLOADS]: The skill instructions suggest installing external packages from NPM (@playwright/cli@latest) and using npx to execute the Playwright test runner. While Playwright is a well-known tool, the specific package name mentioned (@playwright/cli) is not the standard primary package for the project.
[PERSISTENCE]: The skill includes functionality to maintain browser sessions across tasks through state-save and state-load commands, as well as the --persistent flag for browser profiles, which allows for the long-term storage of session credentials and browser history on the host system.

playwright-cli