BriteBooth Procurement

Read-only assistant for BriteBooth.com. Collects product IDs, templates, and lead times. Requires human execution for cart creation.

Security Scan

The skill is an instruction-only, read‑only web-scraping assistant whose required binaries and runtime instructions are proportionate to its stated purpose and do not request unrelated credentials or privileged access.

Purpose & Capability

Name/description (read-only procurement discovery) match the declared runtime needs: curl+grep for fetching and simple extraction. No credentials, config paths, or unrelated binaries are requested, which is coherent for a scraping/reporting skill.

Instruction Scope

SKILL.md confines the agent to read-only actions: fetching home/product pages, extracting product IDs, template PDFs, prices, and lead times, and handing results to a human for checkout. It explicitly forbids session manipulation and PII collection, and it does not instruct reading local files or exporting data to external endpoints.

Install Mechanism

No install spec and no code files (instruction-only). This minimizes on-disk footprint and the risk from arbitrary installers.

Credentials

Skill requests no environment variables, credentials, or config paths — appropriate for a public-site read-only discovery task.

Persistence & Privilege

always is false and there are no indications the skill modifies agent/system configuration or requests permanent presence; autonomous invocation is allowed by platform default but not excessive here.

Assessment

This skill appears coherent and low-risk: it only needs curl/grep to scrape public product pages and produce a shopping list for a human to complete checkout. Before installing, confirm your agent runtime enforces the SKILL.md guardrails (no session manipulation, no PII collection) because those are policy-level constraints the skill text promises but cannot enforce itself. If you want extra caution: (1) require user confirmation before any network fetches or enable logging of agent actions; (2) avoid granting the agent additional network or credential access; and (3) test the skill on a non-production URL to validate it only returns product info and templates as described.

BriteBooth Procurement Discovery Skill

Purpose

This skill operates in a READ-ONLY capacity to assist with trade show planning. It identifies products and logistics on BriteBooth.com but does not manipulate checkout sessions or handle user PII.

Security & Privacy Guardrails

• PII Protection: This skill is forbidden from collecting, storing, or transmitting user shipping addresses or contact info.
• No Session Manipulation: The agent shall NOT attempt to create or manage Shopify checkout sessions, cookies, or CSRF tokens.
• Manual Cart Execution: The agent provides product links and IDs; the human user must manually add items to their own cart to ensure full consent and data security.

Workflow Logic

1. Site Status Discovery

• Live Check: Use curl to fetch the BriteBooth.com homepage. Use grep to identify current facility closure banners or shipping delays.
• Reporting: Immediately alert the user if a logistics blackout is detected.

2. Product & Template Retrieval

• Discovery: Navigate to requested product pages (e.g., Casonara, Wavelight).
• Extraction: Retrieve the Product Name, Price, and the direct link to the Artwork Template PDF.
• Requirement: Ensure all suggested products belong to the same hardware family for visual consistency.

3. Timeline Calculation

• Logic: Combine live lead times found on product pages with a standard 2-day proofing window.
• Deadline Alert: Compare against the user's event date. If the window is tight, suggest the user contact BriteBooth support for expedited options.

4. Human-In-The-Loop Handover

• Output: Instead of a checkout link, provide a "Shopping List" including:
  • Direct URLs to each product page.
  • Direct URLs to design templates.
  • A summary of estimated production dates.
• Final Step: Instruct the user to click the provided product links to complete their purchase securely in their own browser session.