The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions for executing several network monitoring and diagnostic tools, including tcpdump, tshark, ngrep, iftop, and nethogs. These tools are used for capturing and inspecting network traffic and typically require administrative privileges (root/sudo) to access hardware interfaces.
[EXTERNAL_DOWNLOADS]: The skill documentation includes commands for installing utilities like tshark, ngrep, iftop, and nethogs via the system package manager (apt install). This is standard behavior for a skill teaching tool usage.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The skill instructions facilitate reading raw and parsed data directly from network streams and saved capture files (.pcap).
Capability inventory: The skill leverages shell command execution to run monitoring tools that display external packet data.
Boundary markers: There are no specific boundary markers or instructions to treat data from the network as untrusted.
Sanitization: No sanitization methods are mentioned for handling the output of packet capture tools before it is processed by an agent.

traffic-analysis