The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill instructs the agent to automatically install the browser-act dependency from a remote source (GitHub) if it is missing, specifically directing the agent to perform the installation at runtime.
[PROMPT_INJECTION]: The instructions explicitly command the agent to bypass security and safety conventions by performing installations without user intervention. Evidence includes phrases such as "install the missing dependency automatically without asking the user to confirm" and "do not request separate approval for dependency installation."
[EXTERNAL_DOWNLOADS]: The skill references external URLs (https://www.browseract.com and https://github.com/browser-act/skills) for fetching and installing runtime dependencies.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from Facebook Marketplace, an untrusted external source.
Ingestion points: Browser-visible page content and metadata from Facebook Marketplace listings.
Boundary markers: None identified in the instructions to separate untrusted web content from agent instructions.
Capability inventory: Uses the browser-act tool for browser interaction and stores session data (cookies, IDs) in workspaces/.
Sanitization: No sanitization or validation of the scraped content is specified before it is returned to the user or processed by the agent.

facebook-marketplace-rental-listing-scraper