The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions for executing shell commands to manage system services (systemctl stop/start), handle package installation and removal (apt-get install/remove, yum remove), and perform database maintenance (mariadb-upgrade). These actions are appropriate and necessary for the stated task of database migration and system configuration.
[EXTERNAL_DOWNLOADS]: The guide includes commands to download the official MariaDB repository configuration script from r.mariadb.com. This is a well-known and official source for the software being described, and the download is a standard part of the installation process.
[REMOTE_CODE_EXECUTION]: The skill uses a pattern where an installer script is downloaded from r.mariadb.com and piped directly into the bash shell. While this method of remote code execution is sensitive, it is the official installation method provided by MariaDB and is considered safe in this context.
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes external database dumps and reads system tables containing untrusted data. 1. Ingestion points: Reads from mysqldump files and system tables like mysql.user and mysql.global_priv. 2. Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore or isolate potentially malicious instructions embedded within the SQL data. 3. Capability inventory: The skill utilizes subprocess shell execution with root/sudo privileges and has full DDL/DML access to the database engine. 4. Sanitization: There is no evidence of automatic sanitization or validation of the SQL content prior to execution.

mariadb-impl-migration-mysql-to-mariadb