The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses shell and PowerShell commands to download, extract, and execute installers.
Evidence: SKILL.md and scripts/install_win.md define logic for running executables and package managers like dpkg and rpm.
[PRIVILEGE_ESCALATION]: The installation process involves commands that require high privileges to modify the system environment.
Evidence: scripts/install_linux.md executes sudo dpkg -i and sudo rpm -ivh. scripts/install_mac.md uses xattr to remove quarantine bits and cp to the system /Applications folder.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied path data through the -path argument, which could facilitate command injection if not properly sanitized before being used in scripts.
Ingestion points: User input via $ARGUMENTS (processed in SKILL.md).
Boundary markers: Absent; no delimiters or instructions to ignore embedded commands are specified for the user input.
Capability inventory: Subprocess calls (powershell, bash), file-writes (Write tool), and network requests (curl, Invoke-WebRequest) in scripts/install_win.md and SKILL.md.
Sanitization: Absent; the skill does not provide instructions to escape or validate the user-provided path string before execution.
[EXTERNAL_DOWNLOADS]: Fetches software archives and installers from remote domains.
Evidence: Fetches from www.futunn.com and softwaredownload.futunn.com, which are official servers associated with the vendor.
[DYNAMIC_EXECUTION]: The skill generates script files at runtime to perform the installation tasks.
Evidence: scripts/install_win.md instructs the agent to write a install_opend.ps1 file and execute it using PowerShell.

install-futu-opend