The Agent Skills Directory

[COMMAND_EXECUTION]: The skill invokes the opencli command-line utility via Node.js subprocesses to manage browser sessions and execute automation tasks as described in scripts/opencli-core.mjs and scripts/pressure.mjs. This execution is part of the skill's core purpose.\n- [DYNAMIC_EXECUTION]: Core functionality relies on executing JavaScript eval strings within the browser context to interact with and extract data from web pages, as detailed in references/browser-driving.md and implemented in scripts/opencli-core.mjs. While normally a concern, this behavior is essential to the skill's primary purpose.\n- [EXTERNAL_DOWNLOADS]: Installation instructions in SKILL.md and references/our-fork.md guide users to download and install the OpenCLI tool from the yan-labs GitHub organization's releases. This is documented as a legitimate dependency on the tool provided by the author.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to navigate and extract data from untrusted web pages, creating a significant surface area for indirect prompt injection.\n
Ingestion points: Data enters the agent context through browser evaluation in scripts/opencli-core.mjs and DOM extraction in scripts/x-research.mjs.\n
Boundary markers: The skill provides extensive instructional 'laws' and 'disciplines' in SKILL.md and references/session-laws.md to guide agent behavior and avoid accidental obedience to page content.\n
Capability inventory: The skill can control a full browser instance (clicks, typing, file uploads) and execute the opencli CLI tool.\n
Sanitization: Log management in scripts/opencli-core.mjs includes scrubbing authentication tokens from URLs, and scripts/receiver.mjs uses regex validation for file path parameters to prevent directory traversal.\n- [DATA_EXFILTRATION]: The tool has the capability to extract any data visible in the user's browser. While it primarily stores data locally via scripts/receiver.mjs, some scripts like scripts/x-research.mjs interact with external APIs (e.g., api.fxtwitter.com) as part of their research functions.

opencli