The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The scripts/log_functions.sh script defines a run_as_root function that attempts to acquire administrative privileges using sudo. This function is utilized by install_gum to modify system-level configurations, including adding a repository to /etc/apt/sources.list.d/ and installing packages via apt-get.
[DYNAMIC_EXECUTION]: The colorize function in scripts/log_functions.sh employs eval to perform dynamic variable substitution. This allows the script to resolve color code values based on string identifiers passed at runtime.
[INDIRECT_PROMPT_INJECTION]: The skill implements functions like log_file_contents and print_single_log_file that ingest and display the content of arbitrary files from the filesystem. This creates an attack surface where instructions embedded in processed files could be misinterpreted by the agent as directives. Evidence:
Ingestion points: scripts/log_functions.sh (file reading via cat).
Boundary markers: Absent.
Capability inventory: scripts/log_functions.sh contains run_as_root (sudo), apt-get, and curl commands.
Sanitization: Absent.
[EXTERNAL_DOWNLOADS]: The install_gum function in scripts/log_functions.sh fetches a GPG key from the well-known service charm.sh to configure a local repository and install the gum utility.
[COMMAND_EXECUTION]: Multiple functions in scripts/log_functions.sh, such as do_step_task and log_execute_task, are designed to execute arbitrary shell commands provided as arguments and capture their output for logging purposes.

bash-logging