The Agent Skills Directory

[DATA_EXFILTRATION]: The script scripts/find-url.mjs accesses sensitive local browser data including the History SQLite database and Bookmarks files for Google Chrome and Microsoft Edge across macOS, Linux, and Windows platforms.\n- [DATA_EXFILTRATION]: The cdp-proxy.mjs script provides a /screenshot API endpoint that allows the agent to capture the current view of the user's browser and save it to a local file or retrieve the image data.\n- [COMMAND_EXECUTION]: The skill uses spawn and execFileSync in scripts/check-deps.mjs and scripts/find-url.mjs to execute system commands such as sqlite3 for querying browser data and starting background processes.\n- [DYNAMIC_EXECUTION]: The script scripts/cdp-proxy.mjs implements a proxy that uses the Chrome DevTools Protocol (CDP) to execute arbitrary JavaScript within the context of the user's active browser sessions through the /eval, /click, and /clickAt endpoints.\n- [PERSISTENCE]: The scripts/check-deps.mjs script automatically starts the cdp-proxy.mjs process in a detached background state, allowing the proxy to persist and maintain control over the browser session independently of the main agent execution.\n- [INDIRECT_PROMPT_INJECTION]: The references/web-scraper.md instructions guide a sub-agent to ingest and process content from external websites via web searches and the local CDP proxy, creating an attack surface for instructions embedded in third-party web content.

abzu-outline