The Agent Skills Directory

[COMMAND_EXECUTION]: The skill invokes the agent-browser CLI tool using child_process.execFileSync within scripts/cdp-utils.js to facilitate browser-based automation tasks.\n- [DYNAMIC_EXECUTION]: Scraper scripts in scripts/dz-browse-scraper.js and scripts/heiyan-booklist-scraper.js generate JavaScript code at runtime and execute it in the browser context using eval (via agent-browser) to perform data extraction and API calls.\n- [INDIRECT_PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection by ingesting and processing untrusted content from external web platforms.\n
Ingestion points: Data is extracted from ishugui.com and collected via API responses from ms.zhangwenpindu.cn.\n
Boundary markers: No explicit delimitation or sanitization warnings are present for the ingested data.\n
Capability inventory: The skill possesses file-write capabilities via fs.writeFileSync and command execution via execFileSync.\n
Sanitization: Scraped text fields, including book titles and descriptions, are interpolated directly into Markdown reports without escaping or filtering.\n- [DATA_EXFILTRATION]: The script scripts/heiyan-booklist-scraper.js retrieves the Admin-Token from the browser's cookies. This sensitive token is subsequently used in authenticated fetch requests to the platform's backend at https://ms.zhangwenpindu.cn to retrieve book lists and details, which is the primary intended function of the skill for the Heiyan platform.

story-short-scan