The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to set up its execution environment, including installing the Playwright library and its associated Chromium browser engine.
[EXTERNAL_DOWNLOADS]: Fetches the RECAP browser extension from the Free Law Project's GitHub repository. This is a legitimate dependency used to facilitate the retrieval of court documents from public archives.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes unvalidated document titles and metadata from external websites.
Ingestion points: site-patterns.md (logic for extracting titles and links from DocumentCloud, CourtListener, and Scribd)
Boundary markers: Absent; there are no instructions for the agent to ignore or delimit embedded instructions within the scraped text.
Capability inventory: Access to Bash (used for environment setup) and Write (used for storing downloaded files and manifests).
Sanitization: No evidence of sanitization or filtering of extracted metadata before it is presented to the agent.

document-hunter