The Agent Skills Directory

[COMMAND_EXECUTION]: The skill extensively uses command-line tools to interact with virtual machines. It executes vmrun.exe for VM lifecycle management, including starting, stopping, and cloning machines. It uses ssh and scp for remote administration and file transfer within guest environments. It also employs powershell and netsh for host-side configuration and Windows GUI automation.
[PRIVILEGE_ESCALATION]: The skill provides instructions for administrative tasks on the host machine. It modifies Windows Firewall rules using netsh advfirewall to facilitate guest network traffic. It configures network port proxying using netsh interface portproxy to bridge guest access to host services. These operations are specifically marked as requiring user confirmation before execution.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from managed virtual machines, creating a potential attack surface for malformed guest data. Ingestion points include fetching log files and command results from guest operating systems via vmrun CopyFileFromGuestToHost and ssh output redirection. Boundary markers are implemented by prompting the agent to use file redirection to separate command execution from output retrieval. The capability inventory includes broad permissions for file system access, script execution in guests, and host networking configuration. Sanitization is addressed by encouraging the use of regular expression filters when parsing guest output, such as IP address extraction.
[EXTERNAL_DOWNLOADS]: The skill references the acquisition and use of external tools and packages. It utilizes uv run --with vncdotool to dynamically load and execute the vncdotool VNC client for GUI interactions. It references standard package managers like apt (with TUNA mirrors) for guest environment setup and mentions the use of darwin.iso for VMware Tools installation on macOS guests.

lyxy-vmware