The Agent Skills Directory

[DATA_EXFILTRATION]: The skill leaks browsing history to a third-party service. When local extraction fails or provides low-quality results, the convertHtmlToMarkdown function in scripts/lib/extract/html-to-markdown.ts sends the full URL of the target page to https://defuddle.md to fetch a remote markdown conversion.
[CREDENTIALS_UNSAFE]: The X (Twitter) adapter captures and stores sensitive authentication data. It exports session cookies, including auth_token and ct0, to a local file named x-session-cookies.json within the Chrome profile directory to maintain sessions across tool runs. This is implemented in scripts/lib/adapters/x/index.ts and scripts/lib/browser/cookie-sidecar.ts.
[COMMAND_EXECUTION]: The skill instructions in SKILL.md require the agent to execute shell commands using the bun runtime for environment setup (bun install) and tool execution. Additionally, scripts/lib/browser/session.ts uses osascript on macOS to programmatically activate the browser application.
[EXTERNAL_DOWNLOADS]: The skill performs external package installation. During initial setup, it runs bun install to download third-party dependencies defined in scripts/package.json.
[PROMPT_INJECTION]: The skill presents an indirect prompt injection surface. By fetching arbitrary content from the web and converting it to markdown for agent processing, it provides a vector for malicious instructions embedded in remote web pages to influence the agent's behavior.

baoyu-url-to-markdown