The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides comprehensive instructions for executing administrative commands on a remote server using sudo. This includes package management (apt update, apt upgrade), firewall control (ufw), and system service management (systemctl).
[PRIVILEGE_ESCALATION]: The skill includes instructions for creating new users and granting them administrative privileges by adding them to the sudo and docker groups (e.g., sudo usermod -aG sudo,docker newdev).
[PERSISTENCE]: The skill enables the creation of persistent system changes, such as configuring automated tasks via cron (crontab -e), authorizing SSH public keys for users, and enabling system services to start automatically on boot.
[DATA_EXFILTRATION]: The skill accesses sensitive system information, including authentication logs (/var/log/auth.log) and kernel messages (dmesg), which may contain sensitive security data. It also facilitates moving files between the local machine and the server using scp and rsync.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from system logs which could be manipulated by an attacker to influence the agent's behavior.
Ingestion points: Reads output from journalctl, dmesg, and /var/log/auth.log in SKILL.md.
Boundary markers: No explicit delimiters or instructions to ignore embedded content are used when processing log data.
Capability inventory: Includes high-privilege commands like sudo, apt, ufw, systemctl, adduser, deluser, and file manipulation via tee, chmod, chown, scp, and rsync in SKILL.md.
Sanitization: No evidence of sanitization or validation of the log content before it is processed by the agent.

server-admin