The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze untrusted data from third-party repositories, including source code, docker-compose.yml files, and generic Helm charts. This creates a vulnerability where malicious instructions could be embedded in the data being processed (e.g., within comments or README files) to influence the agent's subsequent actions.\n
Ingestion points: Project source code, Dockerfiles, and compose files analyzed in the 'Packaging' and 'Deployment' axes during chart authoring.\n
Boundary markers: The instructions do not define delimiters or warnings to ignore instructions embedded within the analyzed data.\n
Capability inventory: The agent has access to olares-cli, docker, and gh for file system operations, network access, and shell command execution.\n
Sanitization: No specific instructions are provided to sanitize or escape content read from these untrusted sources before the agent processes it.\n- [COMMAND_EXECUTION]: The agent is instructed to execute shell commands (e.g., docker buildx, olares-cli chart from-compose) where arguments like service names or image tags are derived from untrusted third-party configuration files. This presents a risk of command injection if the agent does not strictly validate these inputs.\n- [PRIVILEGE_ESCALATION]: The skill provides recipes for creating Kubernetes manifests that include privileged: true sidecars and runAsUser: 0 initContainers. These are documented as necessary platform patterns for GPU access and storage permission management, and specify the use of trusted vendor images, but they provide the capability to create highly privileged workloads.\n- [DATA_EXFILTRATION]: The skill involves handling sensitive cryptographic materials, specifically TLS certificates and private keys for custom domain setup. The agent is instructed to copy these from restricted system paths to temporary directories for use with the olares-cli tool. This requires the agent to directly access and manage private key data on the host.

olares-chart