The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses shell scripts to manage Chrome browser lifecycles. It executes local commands including ps, kill, rm, and launches the Google Chrome binary.
Evidence: Found in profile-open.sh which launches Chrome, and profile-close.sh which uses kill to terminate the process.
[DATA_EXPOSURE]: The skill handles sensitive browser data (cookies and localStorage), but it implements best practices for security.
Evidence: profile-open.sh creates directories with chmod 700. profile-export.sh creates storage state JSON files with chmod 600 and includes a warning in the documentation about treating these as bearer credentials.
[REMOTE_CODE_EXECUTION]: The skill downloads the @playwright/test package at runtime via npx during the export process.
Evidence: profile-export.sh executes npx -y -p '@playwright/test' node -e "$NODE_SCRIPT". This is a well-known tool used for its intended purpose of interacting with the browser's CDP endpoint.

browser-profile