The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The script scripts/install-deps.sh uses sudo commands to install numerous system-level libraries (e.g., libnss3, libasound2t64, libgbm1) required for Chromium to run on various Linux distributions including Ubuntu, Fedora, and Arch Linux.
[DYNAMIC_EXECUTION]: The script scripts/evaluate.js takes a raw string from the --script command-line argument and executes it directly using eval() within the browser's page context. This allows for arbitrary JavaScript execution in the browser environment.
[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its architecture:
- Ingestion points: snapshot.js (DOM content), console.js (browser logs), network.js (response bodies), and evaluate.js (arbitrary page data).
- Boundary markers: Absent. The skill instructions do not include delimiters or warnings to ignore instructions embedded in the web content being processed.
- Capability inventory: The skill can write files (screenshot.js, network.js), control browser navigation, and execute dynamic JavaScript (evaluate.js).
- Sanitization: None. Data extracted from pages is processed as raw text or JSON.
[DATA_EXFILTRATION]: scripts/network.js monitors and captures full HTTP request and response data. This includes sensitive information such as Authorization headers, cookies, and POST data which often contains user credentials or session tokens. This data can be written to any local file path specified by the user via the --output argument.

chrome-devtools