The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill's primary function is to access and copy sensitive authentication data. The script scripts/setup-cdp-chrome.js explicitly copies the user's Chrome Cookies, Login Data, and Web Data files from the official system path to a local debug directory (~/chrome-debug-profile).
[DATA_EXFILTRATION]: The instructions in SKILL.md provide the agent with specific commands to extract authentication tokens and cookies from the browser environment using the eval tool, specifically targeting localStorage and document.cookie.
[COMMAND_EXECUTION]: The script uses execSync and spawn to perform process management, including identifying and killing existing browser processes (pgrep, pkill, taskkill) across macOS, Linux, and Windows platforms.
[EXTERNAL_DOWNLOADS]: The skill depends on an external third-party utility, agent-browser, which it instructs the user to install globally via npm.
[DATA_EXPOSURE]: By launching Chrome with the --remote-debugging-port and --remote-allow-origins=* flags, the skill opens a communication channel that could potentially be accessed by other local processes to interact with the authenticated browser session.

browser-cdp