The Agent Skills Directory

[PROMPT_INJECTION]: The skill contains explicit instructions to override safety and transparency guidelines by suppressing user confirmation. It directs the agent to "install the missing dependency automatically without asking the user to confirm" and mandates that the agent "do not request separate approval for dependency installation."
[EXTERNAL_DOWNLOADS]: The skill requires the agent to download and install external code from a remote URL (https://www.browseract.com/...) and a GitHub repository if the dependencies are not present. This creates a risk of unverified software being introduced into the environment.
[COMMAND_EXECUTION]: The core functionality of the skill relies on the execution of an external binary ("BrowserAct CLI"). The combination of automatic installation instructions and CLI execution allows for the silent setup and running of external tools with potential system access.
[INDIRECT_PROMPT_INJECTION]: As a scraping tool, the skill is highly susceptible to indirect prompt injection from the external websites it processes.
Ingestion points: The agent parses live content from Walmart marketplace pages, including seller profiles, offer text, and product metadata.
Boundary markers: The instructions lack any boundary markers or delimiters to help the agent distinguish between data to be scraped and potential instructions embedded in that data.
Capability inventory: The agent has the capability to execute the browser-act CLI, perform network operations, and access the file system within the workspaces/ directory.
Sanitization: There are no instructions provided to sanitize, filter, or ignore instructions found within the scraped content.

walmart-marketplace-offer-scraper