The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous examples of shell commands for system administration, including user creation (useradd), group management (groupadd), and auditing commands that access system files like /etc/shadow and /etc/passwd. These commands are standard for the skill's stated purpose.
[PRIVILEGE_ESCALATION]: The instructions include examples of configuring sudo access, such as granting NOPASSWD: ALL permissions to specific users or groups. While this represents a high-privilege configuration, it is documented as a legitimate administrative option for specific use cases like deployment accounts or service management.
[INDIRECT_PROMPT_INJECTION]: The bulk-create-users.sh script processes data from an external CSV file to automate user creation.
Ingestion points: The script reads from a user-supplied CSV file specified via a command-line argument.
Boundary markers: No explicit delimiters or warnings are used to handle potentially malicious content within the CSV fields.
Capability inventory: The script executes useradd, chpasswd, and chage based on the CSV content.
Sanitization: While shell variables are quoted to prevent basic word splitting, there is no validation of the input fields (e.g., ensuring the shell path is valid or the username follows specific formats).

user-management