The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill processes and stores plaintext Redis credentials in configuration files (shake.toml). It also utilizes local SSH private keys (e.g., ~/.ssh/id_rsa) for remote operations. While it includes instructions to mask these in the conversation, the underlying file contains the full credentials.
[COMMAND_EXECUTION]: The skill extensively uses bash, ssh, and scp to execute commands and transfer files to remote servers. This includes starting, stopping, and monitoring background processes, as well as executing remote shell scripts.
[PRIVILEGE_ESCALATION]: The skill instructions include the use of sudo to create systemd service files in /etc/systemd/system/ and to manage services via systemctl. It also modifies file permissions using chmod to secure the configuration files it creates.
[PERSISTENCE]: The skill automates the creation and activation of systemd services on target Linux servers, which allows the migration tool to run persistently and restart automatically across system reboots.
[INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests migration configuration data from external sources such as user-provided Excel tables and natural language descriptions, which are then parsed to generate system commands and configuration files. The skill includes a scripts/confirm-write.sh hook to mitigate the execution of unauthorized high-risk commands.

alibabacloud-migration-dbm-redis-shake-migration