The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/install.ps1 script uses sudo to acquire administrative privileges for installing system packages via apt-get on Linux platforms.\n- [DATA_EXFILTRATION]: The skill operates on sensitive private key files within the ~/.ssh/ directory. While this is the primary function of an SSH key manager, it involves handling high-value credentials that require careful protection to prevent unauthorized access.\n- [EXTERNAL_DOWNLOADS]: Installation scripts download the openssh-client package and its dependencies from official system repositories using apt, dnf, pacman, and apk. These are well-known, trusted sources for software distribution and are used here to provide necessary tooling.\n- [PROMPT_INJECTION]:\n
Ingestion points: User-provided inputs such as file paths, passphrases, and comments are interpolated into ssh-keygen command strings in SKILL.md and references/advanced-usage.md.\n
Boundary markers: No specific delimiters or safety instructions are used to separate untrusted user input from the command parameters, creating a surface for potential command argument manipulation.\n
Capability inventory: The skill has the ability to execute shell commands (ssh-keygen, chmod) and run installation scripts (scripts/install.sh, scripts/install.ps1) that modify the system environment.\n
Sanitization: There is no evidence of validation or escaping for external content before it is used in command execution.

ssh-keygen