The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The script scripts/check-machine.sh includes instructions that recommend the user install DDEV using a curl | bash pattern.\n
Evidence: The script contains the string curl -fsSL https://ddev.com/install.sh | bash as a recommended installation step for macOS users.\n- [COMMAND_EXECUTION]: The skill executes various system diagnostic commands to collect information about the operating system and installed software versions.\n
Evidence: The script scripts/check-machine.sh invokes uname, ddev version, ddev utility dockercheck, docker info, node -v, and npm -v.\n- [PRIVILEGE_ESCALATION]: The skill provides instructions to the user that involve the use of sudo for administrative actions.\n
Evidence: The script includes strings suggesting commands such as sudo systemctl start docker and instructions for adding the user to the docker group.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests output from external commands, which creates a surface for indirect prompt injection if those tools return untrusted or malicious content.\n
Ingestion points: Output from ddev version -j, docker info, node -v, and npm -v in scripts/check-machine.sh.\n
Boundary markers: None. The command output is interpolated directly into a JSON structure without explicit instructions for the AI to ignore embedded commands.\n
Capability inventory: The skill is limited to system diagnostic read operations; it does not have capabilities for writing files or initiating network connections.\n
Sanitization: A json_escape function is implemented to escape backslashes, quotes, newlines, and tabs before command output is included in the JSON response.

machine-check