The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill includes instructions to use elevated privileges to install server components. Evidence: sudo apt install redis-server in SKILL.md.
[COMMAND_EXECUTION]: The skill uses various command-line tools and direct SQL execution to manage the WordPress environment. Evidence: Use of wp plugin install and wp redis enable for environment management. Evidence: Direct execution of database schema modifications using ALTER TABLE and automated cleanup via DELETE queries in SKILL.md.
[DYNAMIC_EXECUTION]: The skill provides PHP code blocks intended to be saved as local files and executed via the command line. Evidence: wp eval-file add-indexes.php instructions in SKILL.md.
[INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect injection as it processes data from logs and database results while possessing high-privilege capabilities. 1. Ingestion points: Performance profiling logs (slow.log), Query Monitor output, and database table metadata (wp_options). 2. Boundary markers: No explicit delimiters or instructions to ignore embedded content are used when processing external data. 3. Capability inventory: The skill utilizes sudo commands, direct SQL modification, and PHP evaluation via wp eval-file. 4. Sanitization: While some maintenance queries use $wpdb->prepare, structural modifications (ALTER TABLE) and some cleanup logic utilize unparameterized strings.

woocommerce-performance