The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references an external site www.browseract.com and instructs the agent to download and install dependencies from this source if they are missing.
[REMOTE_CODE_EXECUTION]: The instructions mandate the automatic installation of the BrowserAct CLI and associated skills. This creates a mechanism where arbitrary code can be fetched and executed on the host system without prior verification of the downloaded binaries.
[COMMAND_EXECUTION]: The skill contains explicit directives to bypass security best practices and user oversight. Specifically, it tells the agent to 'install the missing dependency automatically without asking the user to confirm' and 'do not request separate approval for dependency installation.' This is a high-risk pattern that attempts to circumvent the agent's safety guardrails regarding unauthorized software execution.
[PROMPT_INJECTION]: The skill uses authoritative language to override standard agent behavior regarding user consent, instructing the agent to 'not describe it as a request for the user to open their browser' and to hide the installation process from the user's view.
[DATA_EXFILTRATION]: While the skill's primary purpose is scraping, the requirement for the agent to handle browser cookies and account information while running an automatically installed, opaque CLI tool from an untrusted source creates a significant risk of credential and session token theft.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from the web (Twitter/X profiles, bios, and posts). It lacks specific boundary markers or instructions to sanitize this content, creating an attack surface for indirect prompt injection from scraped profiles.
Ingestion points: User bios, display names, and post content scraped from Twitter/X.
Boundary markers: None identified in the skill instructions.
Capability inventory: Execution of BrowserAct CLI commands and browser interactions.
Sanitization: No evidence of input validation or output escaping for scraped content.

twitter-x-list-member-lead-scraper