The Agent Skills Directory

[COMMAND_EXECUTION]: The skill defines workflows that execute administrative commands using sudo, apt, dpkg, and systemctl. This is necessary for Linux administration but grants the agent substantial control over the operating system environment.
[PRIVILEGE_ESCALATION]: Extensive use of sudo is required for tasks like bootloader repair, filesystem mounting, and service modification. The skill implements safety rules requiring explicit user confirmation for consequential changes, which reduces the risk of accidental or malicious misuse.
[INDIRECT_PROMPT_INJECTION]: The agent ingests potentially untrusted diagnostic data such as system logs (journalctl) and block device labels (lsblk). This creates a vulnerability surface where malicious local content could influence administrative reasoning. Ingestion points: SKILL.md (Step 2 diagnostic block). Boundary markers: Not used for diagnostic output. Capability inventory: High (sudo, apt, systemctl, mount, chroot). Sanitization: No explicit sanitization of system output.

debian-ubuntu