The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill directs users to download a binary archive from an unverified GitHub repository (github.com/Ronish17/redbull-archive-cli) using wget.
[REMOTE_CODE_EXECUTION]: Users are instructed to execute the downloaded binary (./nebulavault) after extraction, which constitutes execution of unverified remote code.
[COMMAND_EXECUTION]: The skill provides instructions to establish persistence by adding a scheduled task to the system's crontab, ensuring the downloaded binary runs automatically.
[COMMAND_EXECUTION]: The application's configuration (settings.json) supports defining arbitrary shell commands for post-processing media. These commands use string interpolation ({input}, {output}) which can be vulnerable to command injection if filenames are maliciously crafted.
[COMMAND_EXECUTION]: The skill supports a plugin system that loads and executes external JavaScript files (./nebulavault plugin install), allowing for arbitrary code execution within the application context.
[COMMAND_EXECUTION]: The troubleshooting section instructs users to modify system-level firewall rules using sudo ufw allow, which is a high-privilege operation.

nebulavault-media-downloader