The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill utilizes sudo to perform administrative network operations, including traffic capture with tcpdump, configuring iptables for traffic redirection, and modifying kernel settings via sysctl. These high-privilege commands are appropriate for the skill's purpose in a malware analysis or forensics context.\n- [EXTERNAL_DOWNLOADS]: The instructions involve downloading and installing well-known security tools and libraries such as mitmproxy, wireshark, tshark, and NetfilterQueue from official package managers and repositories. These are trusted sources within the security community.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted network traffic data, which introduces a vulnerability surface for indirect prompt injection.\n
Ingestion points: Raw network data and packet capture files are parsed by tshark and mitmproxy in SKILL.md and references/commands.md.\n
Boundary markers: The skill does not employ specific markers to distinguish between untrusted packet data and instructions.\n
Capability inventory: The skill has access to privileged system commands for network monitoring and firewall control, as noted in SKILL.md and references/commands.md.\n
Sanitization: There is no explicit sanitization step for the data ingested from network captures.

re-netcap