The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions for using standard CLI tools such as shot-scraper, axe-core, lighthouse, and imagemagick. These are typical for QA workflows and used as intended for screenshot capture and analysis.
[EXTERNAL_DOWNLOADS]: The instructions include commands to install standard, well-known packages from official registries (npm and pip). These are standard dependencies for the tools described (e.g., @axe-core/cli, shot-scraper).
[REMOTE_CODE_EXECUTION]: The skill uses shot-scraper's --javascript flag to manipulate the DOM (e.g., removing cookie banners or scrolling) before taking screenshots. This is a common and legitimate use case for visual testing to ensure consistent UI states.
[DATA_EXPOSURE]: The skill mentions using playwright-cli with saved authentication states to capture screenshots of pages behind a login. This is a standard practice for testing authenticated routes; the skill does not attempt to exfiltrate these credentials or access sensitive system files.

qa-visual