The Agent Skills Directory

[SAFE]: The skill serves as a security-focused instructional guide for infrastructure hardening. It correctly identifies and promotes industry-standard tools (AWS Security Groups, nftables, UFW) and patterns (Bastion hosts, DMZ architecture, Egress filtering) to improve network security posture.- [COMMAND_EXECUTION]: The skill includes numerous shell commands and scripts (e.g., in examples/ufw/basic-web-server.sh) for administrative tasks. These commands, such as ufw enable or systemctl stop iptables, are strictly scoped to the skill's purpose of firewall management and migration. Static analysis flags for service manipulation in references/migration-guide.md and references/troubleshooting.md are benign, as they represent legitimate operations for transitioning between firewall services or recovering from accidental lockouts.- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for infrastructure-as-code (Terraform) and Kubernetes NetworkPolicies. While these involve processing user-defined network parameters (IPs, ports), the skill mitigates injection and misconfiguration risks by providing explicit validation checklists, mandatory 'default-deny' policies, and instructions for external verification using tools like nmap.

configuring-firewalls