The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes external CLI tools (ffmpeg, screenstudio-cli) as described in SKILL.md and runs a local Node.js script (scripts/capture-shots.mjs) to automate browser tasks. Additionally, the Puppeteer launch configuration in scripts/capture-shots.mjs includes arguments (--disable-features=IsolateOrigins,site-per-process) that weaken browser security by disabling Site Isolation.
[DATA_EXFILTRATION]: In SKILL.md, the 'Lane C' instructions describe recording the user's real browser session, including logged-in states and authenticated dashboards. This poses a risk of exposing sensitive data such as PII, account IDs, or internal project names in the resulting media files.
[DYNAMIC_EXECUTION]: The scripts/capture-shots.mjs file uses page.evaluate to dynamically inject and run JavaScript within the browser context to hide elements and simulate scrolling.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external websites. Ingestion points: Browser navigation in scripts/capture-shots.mjs and manual/extension-driven browsing mentioned in SKILL.md. Boundary markers: None present. Capability inventory: Full browser automation (Puppeteer), file system writes (assets/shots/), and shell command execution (ffmpeg). Sanitization: No sanitization is performed on the content of visited sites.

broll-capture