The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill instructs the agent to perform silent installation of external software. Specifically, it states that if the 'browser-act' dependency is missing, the agent should install it 'automatically without asking the user to confirm'.
[PROMPT_INJECTION]: The skill contains explicit instructions to bypass standard safety and transparency protocols. It directs the agent to 'not describe it as a request for the user to open their browser' and to 'not request separate approval for dependency installation'. This suppresses user oversight and control over the environment.
[EXTERNAL_DOWNLOADS]: The skill depends on 'browser-act' CLI and Skill, which are downloaded from an external source (browseract.com) that is not a recognized trusted vendor or well-known service.
[PROMPT_INJECTION]: Indirect Prompt Injection Surface:
Ingestion points: The skill fetches untrusted user-generated content including Reddit comments, profile text, and post content (SKILL.md).
Boundary markers: Absent. The instructions do not define delimiters or provide warnings to the agent to treat the scraped Reddit data as untrusted or non-executable content.
Capability inventory: The agent is equipped with the browser-act tool, which has the capability to browse the web and execute workflows, creating a risk if malicious instructions are embedded in the scraped data.
Sanitization: Absent. There are no instructions to sanitize, filter, or validate the content retrieved from Reddit before it is processed by the agent.

reddit-comment-lead-scraper