The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute a variety of system diagnostic and management tools including journalctl, systemctl, top, htop, df, ip, ping, and ss. These commands are standard for the stated purpose of diagnosing Debian/Ubuntu Linux systems.
[DATA_EXPOSURE]: Execution of diagnostic commands like journalctl -xe and ip addr exposes system logs, network configurations, and process information to the agent's context. This is necessary for the skill's functionality but involves handling sensitive system metadata.
[PROMPT_INJECTION]: The skill processes untrusted external data in the form of system logs (journalctl). This creates an attack surface for indirect prompt injection if an attacker can trigger log entries containing malicious instructions. The instructions do not currently include specific boundary markers or sanitization steps for this ingested log data.
Ingestion points: System logs via journalctl -xe and service logs via systemctl status.
Boundary markers: None specified; logs are read directly into the context.
Capability inventory: Access to shell commands, service management via systemctl, and network diagnostics.
Sanitization: No explicit sanitization or filtering of log content is described.

sysadmin-diagnose