The Agent Skills Directory

[PERSISTENCE]: The skill attempts to maintain its environment by modifying user shell profiles. The scripts scripts/lib/dotnet-runtime.sh and scripts/lib/dotnet-runtime.ps1 append configuration lines to files such as ~/.bashrc, ~/.profile, ~/.zshrc, and the PowerShell $PROFILE. These modifications are designed to persist the DOTNET_ROOT environment variable and ensure the logs tool remains on the system PATH across terminal sessions.
[REMOTE_CODE_EXECUTION]: The installation process involves downloading and executing scripts from the internet. Specifically, scripts/lib/dotnet-runtime.sh fetches an installer from https://dot.net/v1/dotnet-install.sh and executes it via a temporary file. This download originates from the official Microsoft .NET domain, which is a well-known, trusted source.
[INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by ingesting untrusted log data from the SolarWinds Observability API.
Ingestion points: External log data enters the agent's context through the output of the logs CLI tool used in the skill's primary functions.
Boundary markers: The instructions lack explicit delimiters or warnings to treat the ingested log data as potentially adversarial content.
Capability inventory: The skill has the ability to execute shell commands (logs), write to the filesystem (--output-file), and read environment variables.
Sanitization: There is no evidence of sanitization or filtering of the log messages before they are presented to the agent for analysis.
[COMMAND_EXECUTION]: The skill performs several local command executions, including dotnet tool install to deploy the DealerVision.SolarWindsLogSearch package from a local directory and the execution of setup scripts to configure the user environment.
[EXTERNAL_DOWNLOADS]: Fetches installation scripts and configuration directly from the official Microsoft dot.net domain to fulfill the .NET SDK dependency requirement.

solarwinds-logs