The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses camoufox-cli to perform browser automation tasks. This includes executing commands for session management, element interaction (click, type, upload), and the use of eval within the browser context for fallback scenarios.
[DATA_EXFILTRATION]: By design, the skill reads local information (such as project files and memory) and transmits it to remote servers through web forms. This operation involves exposing potentially sensitive local data to external entities.
[PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes untrusted data from external websites to guide its form-filling logic.
Ingestion points: Metadata, labels, and field descriptions from external web forms are ingested during the information gathering phase (Step 1).
Boundary markers: The skill lacks explicit markers to distinguish between trusted instructions and data retrieved from the web during its operation.
Capability inventory: The skill uses browser automation tools with capabilities for file uploads and browser-side script execution.
Sanitization: No validation or filtering is performed on data retrieved from the web forms before it is processed by the agent.

web-form-fill