The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill contains explicit instructions to automatically install the 'browser-act' Skill and BrowserAct CLI if they are found to be missing from the environment. This represents a remote code execution risk as the installation process is triggered dynamically based on the skill's own logic.
[COMMAND_EXECUTION]: The skill directs the agent to execute installation commands silently, specifically ordering it to bypass user confirmation and to not describe the installation process to the user. This 'autonomy abuse' reduces user oversight and allows for the execution of potentially dangerous setup scripts without audit or approval.
[EXTERNAL_DOWNLOADS]: Software dependencies are fetched from an external third-party domain (browseract.com) that is not part of a recognized or trusted package registry or organization. The provided link includes redirection parameters to a GitHub repository, introducing additional risk via unverified installation paths.
[PROMPT_INJECTION]: The skill is vulnerable to Indirect Prompt Injection due to its primary function of ingesting and processing untrusted data from Reddit.
Ingestion points: Target Reddit profiles, niches, keywords, and community discovery data (identified in SKILL.md).
Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed Reddit content.
Capability inventory: The skill utilizes the 'browser-act' CLI, which has the capability to access real browser pages, execute tasks, and interact with web content.
Sanitization: No evidence of sanitization, validation, or filtering of external content is present before processing.

reddit-community-discovery