The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the installation of vibium, a Go-based browser automation binary sourced from an untrusted GitHub organization (VibiumDev).
Evidence: SKILL.md contains instructions for npm install -g vibium and describes the binary as a third-party engine.
[COMMAND_EXECUTION]: All helper scripts in the scripts/ directory function by shelling out to the vibium binary or other Node.js scripts.
Evidence: scripts/lib/vibium.js uses child_process.spawnSync to execute vibium commands. scripts/batch.js spawns node to run assert.js.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process content from untrusted websites, creating a vector for malicious data to influence the agent's behavior.
Ingestion points: scripts/check-injection.js (fetches page text and comments), scripts/intent-score.js (queries DOM attributes and text).
Boundary markers: Not explicitly implemented in the data flow to the LLM context; reliance is placed on structured JSON output.
Capability inventory: The skill has high privileges within the browser, including the ability to navigate, interact with forms, capture screenshots, and access storage.
Sanitization: scripts/assert.js implements a safeRegex function with length and character allowlist checks to prevent ReDoS attacks. scripts/check-injection.js uses sanitizeSnippet to strip terminal control characters.
[DYNAMIC_EXECUTION]: The skill uses browser-side evaluation of JavaScript strings to perform assertions and scoring.
Evidence: scripts/lib/vibium.js contains vibiumEvalStdin which sends JavaScript strings to the browser engine for execution via WebDriver BiDi.
[PRIVILEGE_ESCALATION]: The skill provides instructions for the user to execute commands with elevated privileges during environment setup.
Evidence: SKILL.md instructs the user to run sudo apt-get update and sudo apt-get install -y chromium chromium-driver as a workaround for Linux ARM64 platforms.

qe-browser