The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides various shell commands for system maintenance and hardening, including find, chmod, chown, rm, and openssl. These are standard administrative tools required to implement the security recommendations provided in the skill.
[PRIVILEGE_ESCALATION]: Instructions include modifying directory and file permissions (chmod) and ownership (chown) to secure the installation. These actions are restricted to the local file system and align with the skill's objective to harden a TYPO3 environment.
[INDIRECT_PROMPT_INJECTION]: The skill acts on external TYPO3 configuration files and PHP source code, which constitutes a potential ingestion point for untrusted data. However, the risk is inherent to the task of auditing/hardening existing codebases and is managed by the skill's educational and restrictive nature.
Ingestion points: TYPO3 configuration files (config/system/settings.php), extension source code, and site directory structures.
Boundary markers: None explicitly defined in the provided snippets.
Capability inventory: Local file system manipulation, shell command execution, and PHP code generation/audit.
Sanitization: Not applicable to the agent's internal processing logic, though the skill itself teaches sanitization techniques (e.g., QueryBuilder).

typo3-security