The Agent Skills Directory

[PROMPT_INJECTION]: The instructions command the agent to bypass standard user confirmation workflows and safety checks. Specifically, it directs the agent to 'install the missing dependency automatically without asking the user to confirm' and 'do not request separate approval for dependency installation.' This represents a deliberate attempt to override the agent's built-in safety boundaries and user oversight controls.
[REMOTE_CODE_EXECUTION]: The skill mandates the automatic installation of the 'BrowserAct CLI' and Skill from a remote URL (https://www.browseract.com/...) if they are not detected. This constitutes remote code execution as the agent is directed to download and install executable components from an unverified third-party source at runtime without human intervention.
[EXTERNAL_DOWNLOADS]: The skill requires downloading software and configuration from browseract.com and github.com/browser-act, which are not recognized as trusted vendors or well-known services within the defined security scope.
[COMMAND_EXECUTION]: The automated installation process for the CLI and Skill requires the execution of shell commands, which the skill specifies should be done without seeking user approval, increasing the risk of unauthorized system modification.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from untrusted public sources (Reddit posts, community descriptions) and possesses high-privilege capabilities like browser automation. The instructions lack boundary markers or sanitization requirements for this external content. Evidence: 1. Ingestion points: Reddit subreddit metadata, rules, activity signals, and post references (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: browser-act tool invocation and automatic CLI installation. 4. Sanitization: Absent.

reddit-subreddit-scraper