The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to install expect-cli globally using npm install -g expect-cli. This package is provided by an unverified third-party vendor ('millionco').
[REMOTE_CODE_EXECUTION]: The installation of the expect-cli package from an unverified source represents a supply chain risk, as the package executes with the permissions of the user during installation and subsequent use.
[DATA_EXFILTRATION]: The tool records browser sessions and handles 'cookie/auth injection'. It references an external host https://expect.dev for session replays and sends telemetry to PostHog. The handling of authentication data in conjunction with external network references requires caution.
[COMMAND_EXECUTION]: The primary function of the skill is to execute the expect-cli command with natural language instructions, which grants the tool control over browser environments.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The skill takes natural language input via the -m or --message flag to define test plans.
Boundary markers: None; instructions are passed directly to the CLI.
Capability inventory: The tool can inject cookies, record sessions, and perform arbitrary browser actions.
Sanitization: The skill does not describe any sanitization or validation of the instructions passed to the browser automation engine.

expect