The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides tools to scrape content from arbitrary URLs, which introduces a surface for indirect prompt injection where malicious instructions embedded in web pages could attempt to influence the agent's behavior.
Ingestion points: notte page scrape and notte page eval-js commands in SKILL.md ingest untrusted data from the web into the agent's context.
Boundary markers: The skill includes a dedicated 'Security Notes' section in SKILL.md that explicitly warns the agent about untrusted page content and provides instructions to mitigate risks.
Capability inventory: The agent has access to Bash(notte:*) for browser control, as well as Read and Write tools for local file system access.
Sanitization: The instructions recommend using narrow, structured extraction (e.g., JSON) and warn against chaining scraped values directly into shell arguments.
[EXTERNAL_DOWNLOADS]: The skill documentation provides instructions for installing the Notte CLI and related tools from external sources.
Evidence: SKILL.md suggests installation via Homebrew (github.com/nottelabs/notte-cli.git), Go (github.com/nottelabs/notte-cli), and npx (nottelabs/notte-skills).
Evidence: references/stack-projects.md includes a command to install the uv tool using curl -LsSf https://astral.sh/uv/install.sh | sh.
Context: These downloads target the vendor's own repositories or well-known technology services (Astral, GitHub, Homebrew) and are standard setup procedures for the tool's functionality.
[COMMAND_EXECUTION]: The skill relies on executing the notte CLI via shell commands to perform browser automation tasks.
Evidence: Numerous examples in SKILL.md and the templates/ directory demonstrate the use of notte for session management, page interaction, and function deployment.
Context: This is the primary intended purpose of the skill. The documentation includes warnings about the security implications of passing secrets via command-line arguments (argv) and recommends using vaults to minimize exposure.

notte-browser