The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill stores server passwords in plaintext within the ~/.local/share/remote/servers.json file, exposing sensitive credentials to any process with read access to the local state directory. Additionally, remote.sh creates a temporary executable script containing the server password to facilitate SSH_ASKPASS operations. The skill also disables host key verification (StrictHostKeyChecking=no), which increases vulnerability to man-in-the-middle attacks.
[PRIVILEGE_ESCALATION]: The setup.sh script utilizes sudo to install the sshpass dependency on Linux systems through package managers such as apt-get, dnf, or yum.
[EXTERNAL_DOWNLOADS]: On macOS, the skill attempts to install sshpass from a third-party Homebrew tap (hudochenkov/sshpass/sshpass), which is an untrusted external repository.
[COMMAND_EXECUTION]: The skill provides the ability to execute arbitrary commands on remote servers via SSH, using command strings provided by the user or agent at runtime.
[INDIRECT_PROMPT_INJECTION]: The skill presents a vulnerability surface for indirect prompt injection. 1. Ingestion points: Remote command arguments and outputs processed in remote.sh and remote.ps1. 2. Boundary markers: Absent. 3. Capability inventory: SSH network access, sudo command execution, and local file writes. 4. Sanitization: Limited to base64 encoding of command strings for local script-to-script transport.

remote