The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill utilizes browser automation to retrieve and process text content from external platforms such as Product Hunt, LinkedIn, and Reddit for launch intelligence. This ingestion of untrusted external data creates a potential surface for indirect prompt injection attacks where malicious content on those pages could attempt to influence the agent's behavior.
Ingestion points: The skill uses agent-browser get text body in SKILL.md to collect data from various search results and community pages.
Boundary markers: There are no explicit delimiters or specific instructions for the agent to ignore potentially malicious embedded content in the retrieved data.
Capability inventory: The skill has the capability to execute shell commands and perform authenticated browser sessions.
Sanitization: The instructions do not define specific sanitization or filtering logic for the data extracted from external websites before it is provided to the agent.
[EXTERNAL_DOWNLOADS]: The skill references and installs a dependency from a public GitHub repository (https://github.com/vercel-labs/agent-browser). This tool is used for the skill's core research functionality.
[COMMAND_EXECUTION]: The skill provides several bash command examples for using agent-browser to scrape data and an installation command (npx skills add) to set up the necessary environment. These are standard operations for the skill's intended purpose.

marketing-launch