The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to download software from external GitHub repositories, specifically https://github.com/Svenskithesource/PyArmor-Unpacker and https://github.com/zrax/pycdc. These sources are not recognized as trusted vendors or well-known services.
[COMMAND_EXECUTION]: The skill uses shell commands for environment setup and analysis, including pip install, git clone, cmake, make, and strings. These commands involve fetching and compiling code from the internet.
[DYNAMIC_EXECUTION]: The skill executes Python code at runtime using python3 -c for metadata extraction and runs compiled binaries (pycdc, pyinstxtractor-ng) on untrusted input samples.
[INDIRECT_PROMPT_INJECTION]: The skill processes external binaries and metadata which could contain malicious instructions designed to influence the agent's behavior during analysis.
Ingestion points: Processes untrusted sample.exe, main.pyc files, and content from external GitHub repositories.
Boundary markers: None. There are no delimiters or warnings provided to prevent the agent from interpreting instructions found within the analyzed samples.
Capability inventory: The skill environment allows file system access, network operations (via git and pip), and command execution through the shell.
Sanitization: The skill lacks explicit sanitization or validation of input filenames or the content of the samples being analyzed.

re-python