The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it retrieves and processes content from an external source (Google NotebookLM) without sanitization.\n
Ingestion points: scripts/ask_question.py reads data from the NotebookLM web interface.\n
Boundary markers: Content is returned to the agent without delimiters or instructions to ignore embedded commands.\n
Capability inventory: The skill can execute local scripts via subprocess.run and manage a local notebook library.\n
Sanitization: No validation or sanitization of the retrieved text is performed.\n- [PROMPT_INJECTION]: Hardcoded instructional text is appended to responses retrieved from NotebookLM to influence the agent's behavior and trigger follow-up queries.\n- [COMMAND_EXECUTION]: The skill uses subprocess.run to manage its virtual environment and execute automation scripts. The script scripts/run.py does not fully sanitize script paths, which may allow execution of files outside the intended directory.\n- [EXTERNAL_DOWNLOADS]: The skill automatically downloads and installs Python packages and Google Chrome during setup to support its browser automation features.

notebooklm