The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill extensively uses the Chrome DevTools Protocol (CDP) Runtime.evaluate method to execute dynamically generated JavaScript strings within browser sessions. This is used for automation tasks such as extracting web content, filling forms, and interacting with UI elements on WeChat and X.
[DYNAMIC_EXECUTION]: Several components perform dynamic imports of Node.js modules at runtime (e.g., mermaid, @antv/infographic, and juice) instead of static bundling.
[COMMAND_EXECUTION]: The skill relies on spawn, execSync, and spawnSync to run shell commands, external tools (via npx), and its own internal utility scripts. This includes running autocorrect-node, osascript, and platform-specific clipboard tools.
[INDIRECT_PROMPT_INJECTION]: The skill scrapes arbitrary web content from user-provided URLs via the baoyu-url-to-markdown component. While it utilizes the Readability library to extract clean text and convert it to Markdown, the untrusted content is then fed into automated formatting and publishing pipelines.
Ingestion points: baoyu-url-to-markdown/scripts/main.ts (fetches arbitrary HTML from the web).
Boundary markers: Absent. The scraped content is not explicitly delimited to prevent instruction injection.
Capability inventory: Subprocess execution, file system access, network operations, and browser automation across all publishing scripts.
Sanitization: Present. The skill converts HTML to Markdown, which strips executable scripts and styles from the source.
[EXTERNAL_DOWNLOADS]: The skill downloads syntax highlighting definitions from a third-party CDN (cdn-doocs.oss-cn-shenzhen.aliyuncs.com) at runtime to support code block rendering.
[PRIVILEGE_ESCALATION]: On macOS, the skill uses osascript to send real keyboard events (Cmd+V) to the frontmost application. This automation technique requires the host process (AI Agent or Terminal) to be granted "Accessibility" permissions in the operating system's privacy settings.

content-creation-publisher