The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the user to install the camofox-browser package globally via NPM (npm install -g camofox-browser). This is an external dependency from a vendor not in the predefined trusted list.
[DYNAMIC_EXECUTION]: The skill makes extensive use of the camofox eval command to execute JavaScript within the browser context to interact with page elements. Found in SKILL.md sections 5 and 7, where JavaScript is injected to manipulate textareas on old.reddit.com to bypass automation detection. Dynamically constructing JavaScript strings with user-provided content poses a risk of script injection if the input is not correctly escaped or sanitized by the agent before being passed to the tool.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from Reddit, creating a surface for embedded instructions to influence the agent's actions. Ingestion points: Untrusted data enters the agent context through the camofox snapshot and camofox get-links commands (SKILL.md, Section 3). Boundary markers: There are no instructions or delimiters specified in the skill to help the agent distinguish between Reddit content and its own operational instructions. Capability inventory: The skill provides the agent with capabilities to navigate to arbitrary URLs, perform clicks, execute JavaScript, and manage browser sessions via the camofox tool. Sanitization: The skill does not mention any sanitization or validation of the external Reddit content before it is processed by the agent.

reddit