The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill explicitly prompts the user for sensitive authentication data, including passwords, to handle application login during automated testing.
Evidence: In 'Step 2: Gather Requirements', the skill asks the question 'What is the password?' if authentication is needed.
Evidence: In 'Step 6: Generate and Run Playwright Script', the script template includes a hardcoded placeholder for password: '[PASSWORD]', which would result in the raw password being written to a temporary file (screenshot-script.mjs) on the local file system.
[DYNAMIC_EXECUTION]: The skill uses a template to generate a JavaScript file at runtime and then executes it using the system's Node.js runtime.
Evidence: 'Step 6' involves writing a template to screenshot-script.mjs and then running node screenshot-script.mjs. This script incorporates several user-provided inputs (URL, login, feature paths) without explicit sanitization before execution.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to read and analyze various files within the user's codebase to determine its next steps, creating a surface for indirect prompt injection.
Ingestion points: The agent is instructed to read README.md, CHANGELOG.md, files in the docs/ directory, and various routing configuration files (e.g., routes.rb, page.tsx, urls.py) in 'Step 3'.
Boundary markers: None. The instructions do not specify any delimiters or warnings to ignore instructions found within these files.
Capability inventory: The skill has the ability to create directories (mkdir), write scripts, execute shell commands, and run Node.js code.
Sanitization: No sanitization or validation of the content read from the codebase is mentioned before it is used to 'Build Feature List' and 'Plan Screenshots'.
[COMMAND_EXECUTION]: The skill performs several shell operations to check environment state and manage files.
Evidence: Executes npx playwright --version, mkdir -p screenshots, node screenshot-script.mjs, and cleanup via rm screenshot-script.mjs.

screenshots