The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill includes a 'Browser Relay' feature in lib/browser-relay.js that acts as a remote administration interface. It captures the browser viewport as a stream and executes received mouse and keyboard events directly into the session using the Chrome DevTools Protocol. When active with a public tunnel, this allows anyone with the URL to control the automated browser without authentication.
[EXTERNAL_DOWNLOADS]: In lib/tunnel.js, the skill invokes npx localtunnel, which dynamically downloads and executes the localtunnel package from the npm registry at runtime to establish a public URL.
[COMMAND_EXECUTION]: The skill spawns external processes for npx and cloudflared to manage network connectivity for the relay server.
[COMMAND_EXECUTION]: Uses the Runtime.evaluate method of the Chrome DevTools Protocol to inject and run custom JavaScript within the context of automated web pages for detecting CAPTCHAs and injecting solved tokens.
[PROMPT_INJECTION]: The skill possesses an indirect injection surface. Untrusted data enters the agent context through DOM attribute extraction (e.g., data-sitekey) in lib/detect.js. No explicit boundary markers or 'ignore' instructions are used. The skill has high capabilities, including arbitrary JS execution and input dispatch via CDP. No sanitization is performed on the extracted data before it is interpolated into HTML templates.

captcha-relay