The Agent Skills Directory

[SAFE]: The skill is a specialized configuration tool for the Camoufox browser. It follows security best practices by explicitly instructing the agent to avoid displaying proxy credentials in the chat output, ensuring they are only written to the target configuration file.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it reads the existing browse.json file to merge configurations. However, this is a necessary function for its primary purpose, and the risk is mitigated by the structured JSON merging process. Following the primary purpose rule, this finding does not escalate the safe verdict.
Ingestion points: Reads browse.json during the configuration merge step.
Boundary markers: No specific delimiters are used when reading the file.
Capability inventory: Access to Bash for directory operations and Write for file creation.
Sanitization: The skill performs a specific key-based merge rather than an unsafe evaluation of the file contents.

browse-config