The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes data from external competitor websites using browser automation, creating an attack surface for indirect instruction injection if an attacker controls a monitored site.
Ingestion points: The skill fetches live HTML content from competitor product pages via Playwright as described in SKILL.md and the competitor-monitor.ts task.
Boundary markers: The instructions recommend a parsePriceCents helper to extract numeric data, providing a functional boundary between the external text and the pricing logic.
Capability inventory: The engine can execute platform API calls (Shopify/WooCommerce) to update prices and perform database writes to record price history as shown in the SKILL.md custom implementation.
Sanitization: The system enforces hard floor/ceiling guardrails, a 15% minimum margin floor, and uses numeric conversion to prevent non-numeric content from influencing logic.
[EXTERNAL_DOWNLOADS]: The skill utilizes browser automation and scheduling libraries to perform its primary functions.
Evidence: Mentions of Playwright and Chromium in criteria.json and references to the cron package in SKILL.md.
[COMMAND_EXECUTION]: The skill uses scheduled background tasks to automate the pricing lifecycle.
Evidence: Implementation of WP-Cron for WooCommerce and the CronJob class in the custom TypeScript implementation in SKILL.md to run the repricing engine on a 30-minute interval.

dynamic-pricing