The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to launch desktop applications with the --remote-debugging-port flag and to run agent-browser commands. This is the intended functionality of the skill for controlling desktop apps.
[EXTERNAL_DOWNLOADS]: The allowed-tools list includes npx agent-browser:*, which allows the agent to download and run the agent-browser package from the npm registry.
[PROMPT_INJECTION]: The skill is designed to ingest and process data from external applications which constitutes an indirect prompt injection attack surface.
Ingestion points: Data is ingested from desktop applications using agent-browser snapshot, get text, and tab commands.
Boundary markers: There are no specific boundary markers or instructions to ignore embedded commands in the ingested data.
Capability inventory: The skill allows Bash command execution and full interaction with desktop applications.
Sanitization: No sanitization of ingested content is described in the skill instructions.

electron