The Agent Skills Directory

[COMMAND_EXECUTION]: The installation scripts install-deps.sh and install.sh utilize sudo apt-get install to install required system libraries for Chromium, which involves high-privilege command execution.- [REMOTE_CODE_EXECUTION]: The evaluate.js script executes arbitrary JavaScript code provided via the --script argument using eval() within the Puppeteer browser context. This allows for dynamic code execution on remote pages.- [CREDENTIALS_UNSAFE]: Sensitive authentication data, including session cookies and Bearer tokens, are persisted in a local .auth-session.json file by inject-auth.js and import-cookies.js. While intended for session persistence, this exposes credentials in the filesystem.- [EXTERNAL_DOWNLOADS]: The skill downloads and installs dependencies from the NPM registry and official operating system package repositories during the installation phase.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted content from web pages via aria-snapshot.js, snapshot.js, and network.js, which is then processed by the agent. The skill has high-impact capabilities like arbitrary JS execution and interaction that could be targeted by malicious page content.

chrome-devtools