The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The instructions explicitly direct the agent to use sudo when performing live captures (e.g., sudo iotnet -i eth0 -d 30), which grants the tool root-level access to the system.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from network interfaces and PCAP files, which could contain malicious payloads designed to manipulate the agent's analysis or output. 1. Ingestion points: Network traffic via interface (e.g., eth0, wlan0) and user-provided PCAP files. 2. Boundary markers: Absent; there are no instructions to treat processed data as untrusted or separate it from the agent's control logic. 3. Capability inventory: Execution of the iotnet binary, often with elevated privileges. 4. Sanitization: None; the tool processes raw packet data without described validation or sanitization layers.
[COMMAND_EXECUTION]: The skill relies on executing the iotnet command-line utility with various parameters derived from user input, such as file paths, interface names, and BPF filters.

iotnet