The Agent Skills Directory

[DYNAMIC_EXECUTION]: The JSBridgeInjector class in jm_ufo_agent/backends/js_bridge/injector.py uses the eval() function to execute JavaScript code within the context of the 京麦 (Jingmai) application window. The fill_input and click_element methods construct these JavaScript strings using f-string interpolation of external data (such as product values from Excel or selectors) without any escaping or sanitization. This creates a direct path for arbitrary JavaScript execution in the target application context if the input data is manipulated or malicious.
[INDIRECT_PROMPT_INJECTION]: The skill has a significant attack surface for indirect injection as it ingests and processes untrusted data from multiple external sources:
Ingestion points: Excel files (e.g., 湖南上架表格.xlsx, 公牛上架.xlsx) processed in jm_ufo_agent/io/excel.py and jm_ufo_agent/agents/excel_parse.py; External website HTML from JD.com fetched and parsed in jm_ufo_agent/agents/jd_crawler.py.
Sanitization: No visible escaping or validation of external content is performed before interpolation into automated actions.
Capability inventory: Extensive desktop automation capabilities via pywinauto and pyautogui, file writing to artifacts/, and network access for crawling and API calls.
Boundary markers: Lacks explicit delimiters or warnings to the model to ignore instructions embedded in the ingested product data.
[COMMAND_EXECUTION]: The skill instructions and documentation describe the use of powerful desktop automation libraries like pywinauto and pyautogui to control the host system. While intended for its goal of listing products, the combination of high-privilege GUI control with the processing of unsanitized external data represents a significant security risk to the user's environment.
[EXTERNAL_DOWNLOADS]: The SKILL.md instructions guide the user to download and install system-level dependencies like Tesseract OCR using winget and fetch Chinese language data files from a public GitHub repository (github.com/tesseract-ocr/tessdata). While these are from well-known sources, the installation of external software and data is an administrative action on the host system.

jm-ufo-agent