The Agent Skills Directory

[PERSISTENCE]: The nextdns-boot-fix.ps1 script creates a persistent Windows Scheduled Task (net-ops NextDNS boot flush) that executes a PowerShell script at every user logon to manage DNS cache state.
[PRIVILEGE_ESCALATION]: Several diagnostic and repair scripts (nrpt-clean.ps1, nextdns-doh-setup.ps1, resolver-clean.sh, resolved-reset.sh) require and execute with administrative or root privileges to modify system-wide network configurations, such as NRPT rules and resolver files.
[COMMAND_EXECUTION]: The ssh-bootstrap.sh script automates remote command execution using sshpass for password-based authentication, which may lead to credential exposure if passwords are provided in shell arguments or stored in history.
[CREDENTIALS_UNSAFE]: The smb-audit.ps1 script uses cmdkey /list to enumerate stored credentials in the Windows Credential Manager to diagnose SMB connectivity failures.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external network endpoints (e.g., test.nextdns.io) and system diagnostic tools (e.g., scutil, resolvectl), creating a potential attack surface for indirect prompt injection from compromised or malicious network services.
Ingestion points: Network responses from external diagnostic endpoints and structured outputs from system-level network configuration tools across multiple operating systems.
Boundary markers: Not present in prompt interpolation logic.
Capability inventory: Significant system manipulation capabilities including registry editing, DNS policy modification, scheduled task management, and file system writes in protected directories.
Sanitization: Relies on basic regex-based parsing and standard JSON deserialization.

net-ops