The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes standard package management commands including npm install, npm ci, and npx playwright to set up the development environment. It also performs filesystem operations like rm -rf, mkdir, and ln -s to manage the local dependency store, with path validation to prevent traversal.
[PRIVILEGE_ESCALATION]: The scripts/install.sh script includes a command to install Playwright system dependencies using sudo: sudo npx playwright install-deps chromium. This action is gated by a check for passwordless sudo availability and is a standard requirement for Playwright browser setup.
[CREDENTIALS_UNSAFE]: The installation script accesses the .npmrc file, which may contain authentication tokens for private registries. The script implements security best practices by restricting the file permissions to owner-only access (chmod 600) when copying it to the local installation directory.
[DYNAMIC_EXECUTION]: The script utilizes node -e to execute inline JavaScript for verifying the integrity of native binaries (such as esbuild, vite, and rollup) and for parsing package.json to check for specific dependencies. These snippets are static and use argument passing to handle variable inputs safely.

sandbox-npm-install