The Agent Skills Directory

[COMMAND_EXECUTION]: The skill relies on executing high-privilege shell commands using sudo to enable IP forwarding, configure network interfaces, and run packet manipulation tools like Ettercap and Scapy.
[PRIVILEGE_ESCALATION]: Documentation instructs the user to persistently modify the /etc/sysctl.conf file to enable IP forwarding. This action requires root privileges and significantly alters the system's network security posture by allowing the host to route traffic between other nodes.
[INDIRECT_PROMPT_INJECTION]: The skill provides sniffer scripts for Modbus, IEC 104, and DNP3 that ingest untrusted raw network data. If an agent processes or summarizes the output of these tools, it could be exposed to instructions embedded in the captured traffic.
Ingestion points: scapy_scripts/modbus_sniffer.py, scapy_scripts/iec104_sniffer.py, and scapy_scripts/dnp3_sniffer.py capture and display live network traffic.
Boundary markers: No delimiters or warnings are present in the output of the sniffer scripts to distinguish between tool metadata and untrusted packet content.
Capability inventory: The skill environment has full shell access via sudo and network transmission capabilities through Scapy's send() function.
Sanitization: Captured packet payloads are printed directly to the console as hex or raw data without sanitization or filtering.

ics-traffic