The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The installation guide includes commands that use administrative privileges to move binaries into system-protected directories, specifically using 'sudo mv' to place the gitleaks binary in '/usr/local/bin/'.
[PERSISTENCE]: The skill instructs the creation of a git pre-commit hook by writing a shell script directly into '.git/hooks/pre-commit'. This mechanism ensures that the specified script runs automatically on every commit attempt within the repository.
[COMMAND_EXECUTION]: The skill documentation includes procedures for downloading remote binaries, modifying their execution permissions using 'chmod +x', and generating local shell scripts for git integration.
[EXTERNAL_DOWNLOADS]: The skill fetches the Gitleaks binary from its official GitHub releases page ('https://github.com/gitleaks/gitleaks/releases/latest/download/gitleaks-linux-amd64').
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted data including source code and git history, creating a potential surface for indirect injection if findings are processed without sanitization.
Ingestion points: The tool scans local source code and complete git history via the 'gitleaks detect' and 'gitleaks protect' commands.
Boundary markers: No explicit delimiters or warnings for the agent regarding the processing of embedded instructions in scan results are provided.
Capability inventory: The skill utilizes 'Bash' for command execution and has access to file system tools ('Read', 'Glob', 'Grep').
Sanitization: There is no mention of sanitizing or escaping the content of detected secrets or surrounding code before it is presented to or processed by the agent.

gitleaks