The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads installation scripts from external sources during the server bootstrap process.
Evidence includes fetching the Tailscale installation script from https://tailscale.com/install.sh and the Beszel agent installation script from https://get.beszel.dev using curl.
[REMOTE_CODE_EXECUTION]: External scripts downloaded from remote servers are executed with high privileges on the host.
The APPLY_SCRIPT in scripts/server_bootstrap.py downloads shell scripts to /tmp/ and executes them using sh or direct invocation to install networking and monitoring tools.
[COMMAND_EXECUTION]: The skill is designed to resolve and execute arbitrary shell commands defined in repository-specific task contracts.
The scripts/host-governance.py runner uses subprocess.run() to execute commands resolved by scripts/resolve.py from project-provided configuration files.
[PRIVILEGE_ESCALATION]: The skill performs sensitive system-level modifications, including user management and security policy changes.
scripts/server_bootstrap.py creates new users (useradd), grants passwordless sudo access via /etc/sudoers.d/, and modifies SSH daemon configurations (sshd_config).
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project configuration files that define executable operations, creating an indirect injection surface.
Ingestion points: scripts/resolve.py reads and parses .agents/skills-config/host-governance/config.yaml and associated contract JSON files from the project repository.
Boundary markers: The skill uses a versioned schema (host-governance.task-contract.v1) and validates command paths, but lacks explicit "ignore instructions" delimiters for external configuration data.
Capability inventory: The skill has broad capabilities, including file system writes, network operations, and arbitrary subprocess execution via its task runner.
Sanitization: The skill validates that executables exist and are within the project or skill root, and requires a mechanical --authorized flag for mutating operations.

host-governance