The Agent Skills Directory

[COMMAND_EXECUTION]: The skill documentation and installation script contain various shell commands using sudo, docker, and gh. These are intended for the installation and operation of the Agentic Workflow Firewall tool, which requires elevated privileges to manage network namespaces and iptables rules.
[EXTERNAL_DOWNLOADS]: The README.md and install.sh files reference downloading content from github.com and raw.githubusercontent.com under the github organization. These are used to fetch the SKILL.md definition and the install.sh script itself. As these target a well-known service and trusted organization, they are considered safe.
[PRIVILEGE_ESCALATION]: The skill frequently references the use of sudo for tool installation and execution. The documentation explicitly warns users to 'Obtain and review install.sh through an independently authenticated channel' and not to 'pipe an unauthenticated download into sudo bash,' demonstrating a security-conscious design.
[REMOTE_PIPED_EXECUTION]: The README.md mentions a one-liner installation pattern (curl ... | bash). However, the skill instructions repeatedly emphasize manual review of these scripts before execution, and the source (github.com/github/*) is a trusted repository.

awf-skill