The Agent Skills Directory

PROMPT_INJECTION (LOW): The skill facilitates indirect prompt injection by navigating to external competitor websites during its research phase. 1. Ingestion points: The agent visits user-provided or discovered URLs using agent-browser open [url]. 2. Boundary markers: There are no instructions to isolate or ignore instructions contained within the HTML/text of visited websites. 3. Capability inventory: The skill has the ability to read and modify local source code files and execute browser automation commands. 4. Sanitization: No validation or sanitization of the content retrieved from external websites is performed before processing.
COMMAND_EXECUTION (LOW): The skill uses the agent-browser command-line utility to automate browser interactions. 1. Evidence: Multiple shell-based tool calls such as agent-browser snapshot, agent-browser scrollintoview, and agent-browser screenshot are core to the workflow.

design-iterator