The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches KICS binaries from the official Checkmarx GitHub repository releases.
[COMMAND_EXECUTION]: The instructions utilize common shell utilities such as wget, tar, and brew, alongside the kics CLI itself to perform security audits.
[PRIVILEGE_ESCALATION]: Installation steps include the use of sudo to move the downloaded binary into a global system directory (/usr/local/bin/).
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external Infrastructure as Code (IaC) files, which represents an attack surface.
Ingestion points: Files located at paths specified in kics scan -p commands, including Terraform, Kubernetes, and Dockerfiles.
Boundary markers: None present in the instructions to delimit external content from agent instructions.
Capability inventory: The agent has access to Bash, Read, Glob, and Grep tools.
Sanitization: No explicit sanitization or validation of the processed files is described.

kics