The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill contains explicit instructions to automatically install the 'BrowserAct' CLI and associated skills if they are missing. It specifically directs the agent to perform this installation without asking the user for confirmation or separate approval, which bypasses standard security boundaries for software installation.
[EXTERNAL_DOWNLOADS]: The skill references and downloads dependencies from a third-party domain (browseract.com) that is not identified as a trusted source. The installation process involves a redirect from this third-party site to a repository.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and process untrusted data from TikTok Shop pages, creating a vulnerability surface for indirect prompt injection.
Ingestion points: External TikTok Shop URLs, product pages, and live stream metadata (found in SKILL.md).
Boundary markers: None identified; instructions do not include delimiters or specific warnings to ignore embedded instructions in the scraped data.
Capability inventory: The skill utilizes the browser-act tool to perform browser interactions, navigation, and data extraction (found in SKILL.md).
Sanitization: There are no instructions for sanitizing, escaping, or filtering the content retrieved from external pages before it is returned or processed.

tiktok-shop-live-product-reference-scraper