The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill instructs the user to download and execute an installation script from https://squirrelscan.com/install by piping it directly to bash. This pattern is highly insecure as it executes remote code without verification of the script's integrity or content.
[REMOTE_CODE_EXECUTION]: On Windows systems, the skill recommends using iex (Invoke-Expression) to execute a remote PowerShell script from https://squirrelscan.com/install.ps1. Like the bash piping pattern, this executes arbitrary remote code directly in the user's shell environment.
[COMMAND_EXECUTION]: The skill utilizes a custom CLI tool (squirrel) to perform wide-ranging system operations, including crawling websites, managing a local database, and modifying configuration files in the user's home directory (~/.squirrel/).
[PRIVILEGE_ESCALATION]: The troubleshooting section suggests manually changing file permissions using chmod +x on binaries downloaded from the internet, which facilitates the execution of potentially unverified third-party code.

audit-website