The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill facilitates the request of broad, wildcard-based permissions within the Microsoft Scout environment. It instructs the agent to use the m_request_permission_escalation tool with a profile containing highly sensitive cmdlets such as Set-ExecutionPolicy *, Invoke-WebRequest *, and Start-Process *. This configuration attempts to move the agent's environment toward a 'permission-max' state, which bypasses the principle of least privilege and increases the attack surface.
[COMMAND_EXECUTION]: The skill advocates for the use of high-risk execution flags in the Copilot CLI, specifically referencing --allow-all (aliased as --yolo), --allow-all-tools, and --silent. These flags are intended to suppress safety confirmations for tool execution, network requests, and file access, creating a dangerous execution environment where commands are executed without human-in-the-loop validation.
[DATA_EXFILTRATION]: The diagnostic procedures in references/host-cli-diagnostics.md involve scanning and inspecting configuration files within sensitive user directories (e.g., %USERPROFILE%\.copilot, %APPDATA%\Code\User). This includes searching for files containing 'permission' or 'settings' strings, which can expose local security configurations, trust relationships, and access control lists to the agent context.

permission-max