The Agent Skills Directory

[COMMAND_EXECUTION]: The helper script scripts/with_server.py uses subprocess.Popen with shell=True to execute server commands provided via the --server argument. This allows the execution of arbitrary shell commands as part of the intended server management lifecycle.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates reading and processing untrusted data from web applications, creating a vulnerability surface where malicious content could influence agent behavior.
Ingestion points: Untrusted content is ingested from web pages in examples/element_discovery.py using page.content() and page.locator().all(), and in examples/console_logging.py via msg.text.
Boundary markers: There are no explicit delimiters or instructions to the agent to ignore embedded commands when processing the ingested web content.
Capability inventory: The skill possesses command execution capabilities through the scripts/with_server.py utility, which utilizes subprocess.Popen with shell=True.
Sanitization: No sanitization, escaping, or validation of the ingested web content is performed before it is processed by the agent.
[DYNAMIC_EXECUTION]: The script scripts/with_server.py dynamically constructs and executes shell commands at runtime based on arguments provided by the agent to coordinate the execution of servers and testing scripts.

webapp-testing