The Agent Skills Directory

[COMMAND_EXECUTION]: The assets/cbx.sh script is vulnerable to shell command injection in its get command. The $REMOTE variable is interpolated into a bash string executed on the remote instance (base64 -w0 '$REMOTE'). A filename containing shell metacharacters could break out of the single quotes and execute arbitrary commands on the remote box.
[COMMAND_EXECUTION]: The assets/cbx.sh script uses eval to execute an SSH tunnel command. Using eval on strings containing variables is a risky practice as it can lead to arbitrary code execution if the variables are manipulated by an attacker or malicious data.
[EXTERNAL_DOWNLOADS]: The assets/Dockerfile downloads and installs several external dependencies from well-known sources:
Fetches the Docker static binary directly from Docker's official download servers (download.docker.com).
Installs the Playwright browser automation framework and CLI from Microsoft via the NPM registry.
[COMMAND_EXECUTION]: The assets/setup.sh script utilizes sudo to start the Docker daemon and modify permissions for the Docker socket (/var/run/docker.sock). While these are privileged operations, they are restricted to enabling Docker-in-Docker functionality within the isolated development container.

crabbox-setup