The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill's reference documentation for configuration recovery suggests the use of sudo for several high-privilege operations, including installing system packages (apt install auditd), configuring kernel-level file monitoring (auditctl), and modifying systemd service definitions (systemctl edit). While these are presented as manual troubleshooting steps, they represent a privilege escalation vector if adopted by an autonomous agent.
[DATA_EXFILTRATION]: The investigation phases and reference guides instruct the agent to read and monitor sensitive configuration files such as .env, ~/.bashrc, ~/.profile, and other system configuration paths. These files are known to contain credentials, API keys, and environment-specific secrets. The skill encourages deep inspection and tracing of data flow through these files to identify root causes of configuration drift or recovery issues.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, creating a vulnerability surface for indirect prompt injection.
Ingestion points: The agent is instructed to use read_file and terminal to capture error messages, stack traces, application logs, and shell command outputs (e.g., git log, pytest output) in SKILL.md.
Capability inventory: The skill utilizes the terminal tool for code execution and reproduction, and read_file/search_files for code and log analysis across all phases.
Sanitization: There are no specific instructions or automated checks to sanitize or escape instructions that might be embedded within logs or error strings before they are processed by the agent's logic.
Boundary markers: The process lacks explicit boundary markers or delimiters to separate untrusted debug data from the agent's core instructions.
[COMMAND_EXECUTION]: The skill heavily relies on executing shell commands via the terminal tool for reproducing bugs, checking git history, and running diagnostic tools. It suggests complex command pipelines involving git, pytest, grep, and inotifywait.

systematic-debugging