The Agent Skills Directory

[DYNAMIC_EXECUTION]: The helper script scripts/omowright.mjs dynamically resolves and imports the omowright library from computed paths. It checks environment variables (OMOWRIGHT_ROOT) and deeply nested relative paths (../../../../node_modules/...) to locate the entry point, which could lead to the execution of unintended code if the environment or file structure is manipulated.\n- [REMOTE_CODE_EXECUTION]: The installation process described in references/install.md and scripts/browser-install.mjs involves downloading and executing shell scripts (install.sh or install.ps1) from the official GitHub repository for BrowserSkill (Tencent). While this targets a well-known technology provider, it involves the execution of remote code at runtime.\n- [PRIVILEGE_ESCALATION]: The installation process for the browser extension involves writing to system-level directories on Linux (e.g., /opt/google/chrome/extensions/) and modifying the Windows Registry (reg add). The documentation notes that root privileges are required for certain Linux installation paths.\n- [DATA_EXFILTRATION]: The skill enables network traffic interception via createNetworkSnoop and provides detailed recipes for accessing sensitive browser-based data, such as 1Password vaults. Although safety instructions like masking secrets and clearing the clipboard are provided, these features facilitate the exposure of highly sensitive user information.\n- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external website content, creating an attack surface. 1. Ingestion points: bskSnapshot, observe, snapshot, getHtml in references/commands.md. 2. Boundary markers: None present for external content. 3. Capability inventory: click, fill, navigate, evaluate (JS execution), network snooping. 4. Sanitization: None present for ingested page content.\n- [COMMAND_EXECUTION]: The skill executes multiple system commands via scripts, including bsk status, bsk doctor, and registry modifications on Windows, to configure the browser automation environment.

browser