The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes templates that leverage sudo for high-privilege operations, such as automated package installation (sudo apt-get install -y "$package") and service management (sudo systemctl restart "$service_name").
[COMMAND_EXECUTION]: The 'Task Scheduler' template provides a mechanism to modify the user's crontab ((crontab -l 2>/dev/null; echo "$schedule_time $scheduled_task") | crontab -), which is a standard method for establishing persistence on Linux systems.
[REMOTE_CODE_EXECUTION]: The 'Remote Script Execution' template facilitates running local code on remote systems via SSH (ssh "$remote_server" "bash -s" < "$remote_script"), which is a potent vector for lateral movement or remote command execution.
[CREDENTIALS_UNSAFE]: The 'Database Backup Script' template explicitly includes a variable for a hardcoded database password (db_pass="password"). Although marked as a placeholder, it encourages the practice of embedding secrets in plain-text scripts.
[PROMPT_INJECTION]: The skill processes untrusted external data through its log analysis templates, creating a surface for indirect prompt injection.
Ingestion points: Reads from /var/log/syslog and web server access logs (e.g., /var/log/apache2/access.log).
Boundary markers: None; data is processed directly via grep and awk without encapsulation.
Capability inventory: The skill has access to sudo, crontab, rm (file deletion), and ssh (network/remote execution).
Sanitization: None; log content is analyzed as raw text.

linux-shell-scripting