The Agent Skills Directory

[COMMAND_EXECUTION]: Multiple scripts including ai_site.py, firewall_ops.py, and runtime.py execute high-privilege shell commands and internal aaPanel API calls. A notable example is firewall_ops.py, which directly modifies /etc/sysctl.conf to manage ICMP response settings.
[EXTERNAL_DOWNLOADS]: The btpanel_software and btpanel_runtime components facilitate the installation of various software and runtimes from aaPanel's official software store. While these are vendor resources, they involve downloading and executing remote installers.
[REMOTE_CODE_EXECUTION]: The btpanel_ai_site instructions guide the agent to create project directories, write source code, and run package managers such as npm install. This process poses a remote code execution risk if the agent ingest untrusted configuration or code files.
[PRIVILEGE_ESCALATION]: The runtime.py script contains a BtPanelContext class that programmatically mocks an administrative session by setting session['uid'] = 1 and session['login'] = True. This allows the script to invoke high-privilege panel methods without standard user authentication.

btpanel