The Agent Skills Directory

[COMMAND_EXECUTION]: The skill is authorized to execute specific shell commands for environment setup and process management. Evidence includes engagement directory creation (mkdir -p), hostname resolution checks (getent hosts), and subprocess cleanup using tools like pkill and kill to terminate orphaned processes from subagents.
[PRIVILEGE_ESCALATION]: The skill provides instructions for the user to execute system-level configuration changes via sudo. These are used for safety-critical tasks such as synchronizing the system clock for Kerberos authentication (temp_clock-sync.sh) and updating the local hosts file for DNS resolution (temp_hosts-update.sh), both of which require manual operator confirmation.
[DATA_EXFILTRATION]: The orchestrator includes a dedicated "FLAG CAPTURE" directive designed to automatically search for and record sensitive files (such as root.txt and user.txt) from target systems once shell access is established. This data is recorded as vulnerabilities in the engagement state.
[INDIRECT_PROMPT_INJECTION]: As an orchestrator, the skill processes findings from various subagents, creating a surface for potential indirect prompt injection from target data.
Ingestion points: Findings returned by technique agents, reconnaissance results from discovery agents, and notifications from the background event watcher.
Boundary markers: The instructions mandate that discovery findings be treated as "informational context" rather than directives that override methodology.
Capability inventory: The skill possesses the ability to execute shell commands, spawn further subagents via the Task tool, and write to the persistent SQLite state database.
Sanitization: Findings are parsed and deduplicated via state MCP tools, though explicit sanitization of subagent output is not detailed.
[DYNAMIC_EXECUTION]: The skill generates and executes dynamic content at runtime, such as the engagement/web-proxy.sh script used to route traffic through a local proxy. It also maintains background execution for an event monitoring script (event-watcher.sh).
[EXTERNAL_DOWNLOADS]: The documentation mentions an external monitoring utility called agentsee, which is hosted on the author's public GitHub repository.

red-run-legacy