The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the installation of a third-party Java extension (burpsuite-project-file-parser) from a community GitHub repository (BuffaloWill/burpsuite-project-file-parser). This binary provides the core logic for parsing the project files.
[COMMAND_EXECUTION]: The skill utilizes a Bash wrapper script (burp-search.sh) that executes shell commands and invokes Java (java -jar) to process project files using the Burp Suite binary.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The skill ingests untrusted data from Burp Suite project files (.burp), including HTTP request/response headers and bodies.
Boundary markers: While the skill encourages the use of jq for structured output, it does not define explicit boundary markers to separate the ingested data from the agent's internal instructions.
Capability inventory: The skill uses Bash to perform regex searches, filter data, and execute scripts.
Sanitization: The skill implements significant safety guardrails, including mandatory 1000-character truncation for response bodies and a 50KB total output limit per operation to mitigate context pollution.
[PERSISTENCE]: The documentation provides instructions for users to modify their shell profiles (e.g., .bashrc, .zshrc, or Windows Environment Variables) to persist the BURP_JAVA and BURP_JAR paths.

burpsuite-project-parser