The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses curl to send voice notifications to a local endpoint (http://localhost:31337/notify) and to communicate with the Senhasegura PAM platform API for authentication and secret retrieval.\n- [EXTERNAL_DOWNLOADS]: The skill downloads an executable binary (dsm-linux-amd64) from the GitHub repository github.com/senhasegura/dsmcli across several workflow and reference files.\n- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to grant execution permissions to the downloaded dsm binary and install it into a system path, creating a potential execution vector for third-party code.\n- [PRIVILEGE_ESCALATION]: Instructions include the use of sudo to move the downloaded CLI binary to /usr/local/bin, requiring the agent to operate with elevated system permissions.\n- [DATA_EXFILTRATION]: The skill retrieves highly sensitive credentials and secrets. By default, the dsm runb command writes these secrets to a local file named .runb.vars in the current working directory, which poses a significant risk of data exposure if accidentally committed to version control.\n- [PERSISTENCE]: The skill implements a logging mechanism that appends execution metadata (timestamps, workflow names, and statuses) to a persistent file at ~/.claude/PAI/MEMORY/SKILLS/execution.jsonl.\n- [INDIRECT_PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by ingesting data from the external Senhasegura platform.\n
Ingestion points: Credential metadata, SSH keys, and DSM secrets are fetched from Senhasegura API endpoints and injected into the environment.\n
Boundary markers: The skill does not define explicit prompt delimiters to separate platform-provided data from agent instructions.\n
Capability inventory: The agent possesses capabilities for shell command execution (curl, dsm), file system modification, and outbound network access.\n
Sanitization: While the provided clients utilize standard parsing, retrieved secrets are directly sourced into the shell environment without specialized sanitization for instruction injection.

senhasegura