The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes child_process.spawn and spawnSync to run the ego-browser binary. This is the intended runtime environment for the skill and is used to automate interactions with the Xiaohongshu creator website.
[DYNAMIC_EXECUTION]: In scripts/lib/launch.mjs, the skill dynamically constructs a JavaScript entry point that it executes via ego-browser nodejs. The script generation is secured by using JSON.stringify on all dynamic values, preventing parameter injection into the generated code.
[INDIRECT_PROMPT_INJECTION]: The skill captures data from the Xiaohongshu creator platform to provide the agent with status updates on account login and publication results.
Ingestion points: Text and nicknames are scraped from the DOM using page.evaluate calls in scripts/lib/session.mjs and scripts/lib/run-check.mjs.
Boundary markers: Scraped data is placed into a JSON response structure, though it lacks specific delimiters to separate untrusted web content within the summary string.
Capability inventory: The skill can navigate to arbitrary URLs within the ego-browser environment and read local media files.
Sanitization: Scraped text is truncated and navigation-related keywords are removed to prevent confusing the agent's internal state.

xiaohongshu-ego