The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of local and remote shell commands via SSH to discover ports, manage tunnels, and interact with the Windows Task Scheduler. These are documented as necessary steps to maintain connectivity to the browser across a Tailscale network.
[REMOTE_CODE_EXECUTION]: The skill provides instructions to execute PowerShell commands remotely on a Windows host using -EncodedCommand. This is used for legitimate administrative tasks such as reconfiguring the chromedebug scheduled task and fixing port conflicts or power management settings.
[EXTERNAL_DOWNLOADS]: The cdp.py script attempts to fetch egress IP information from ip-api.com to verify proxy settings. This is a common connectivity check and does not involve downloading executable code.
[DATA_EXFILTRATION]: While the skill can access sensitive data behind logins (Vercel, Google Cloud), the design ensures that all activity is visible on the user's physical screen, and the instructions explicitly state this should only be done upon direct user request. No evidence of hidden exfiltration was found.
[PRIVILEGE_ESCALATION]: The skill documentation mentions the need for admin rights for a 'durable fix' involving netsh, but provides non-admin alternatives and does not automate the elevation of privileges.
[DYNAMIC_EXECUTION]: The cdp.py script uses the Chrome DevTools Protocol (CDP) to evaluate JavaScript expressions within the context of a browser extension. This is the primary mechanism for controlling the proxy settings and is restricted to the specific extension environment.

windows-host-browser