The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes the unzip utility and standard system diagnostic tools such as grep, ls, chmod, and rm. These are used for listing contents, verifying file integrity, and managing permissions.
[EXTERNAL_DOWNLOADS]: The installation scripts (scripts/install.sh and scripts/install.ps1) download the unzip package from official, well-known system repositories including APT (Debian/Ubuntu), DNF (Fedora/RHEL), Pacman (Arch), APK (Alpine), and Homebrew (macOS).
[PRIVILEGE_ESCALATION]: The PowerShell installation script invokes sudo to update and install packages on Linux distributions. This is standard behavior for system-level software installation and is scoped to the unzip package.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process external ZIP archives, which are potentially untrusted. It mitigates this attack surface by instructing the agent to always list archive contents (unzip -l) and explicitly check for path traversal patterns (../ or absolute paths) before performing any extraction.
[SAFE]: Instructions include security best practices for handling encrypted archives, such as recommending interactive password prompts or stdin pipes over plain-text command-line arguments to avoid leaking secrets in process history.

unzip