The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The bb-browser site update command fetches "community adapters" from a remote repository. The source and integrity of these adapters are not defined within the skill, which could allow for the installation of untrusted scripts.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The skill retrieves data from numerous external platforms including social media (Twitter, Reddit), news sites, and developer forums (GitHub, StackOverflow) via bb-browser commands.
Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard instructions contained within the fetched web content.
Capability inventory: The skill has the capability to execute shell commands via bb-browser and manipulate data using jq filters.
Sanitization: The skill lacks sanitization or filtering logic to strip potentially malicious prompt injection payloads from the scraped website data before processing.
[COMMAND_EXECUTION]: The skill relies on executing the bb-browser binary through a Bash shell to perform data extraction, adapter management, and informational queries.

bb-browser-openclaw