The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to install and execute the agent-browser package from the NPM registry. This tool likely downloads browser binaries (such as Chromium) during setup.
[DYNAMIC_EXECUTION]: The skill uses the agent-browser skills get command to dynamically fetch and follow workflow instructions at runtime, which may change the agent's behavior based on remote content.
[DATA_EXFILTRATION]: The skill accesses and manages sensitive browser data, including persistent profiles and session cookies stored at ~/.notis-agent-browser/, which are used to maintain authenticated sessions across runs.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites through browser snapshots, creating an attack surface for malicious instructions embedded in web content.
Ingestion points: Web page content and accessibility trees captured via agent-browser snapshot (referenced in SKILL.md and references/browser-help.md).
Boundary markers: None identified; there are no explicit instructions to the agent to ignore commands found within the captured web data.
Capability inventory: The agent can execute shell commands via the agent-browser CLI and perform filesystem writes for session state management.
Sanitization: No sanitization, validation, or filtering of the ingested web content is described.
[COMMAND_EXECUTION]: The skill relies on shell command execution to perform browser automation tasks, manage profiles, and interact with local or sandbox environments.

notis-browser-control